PT-2007-2162 · Comodo · Comodo Firewall Pro

Published 2007-02-04 · Updated 2018-10-16 · CVE-2007-0709

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Comodo Firewall Pro versions 2.4.16.174 and earlier

Description The issue concerns the cmdmon.sys component in Comodo Firewall Pro, which fails to validate arguments from user mode for several hooked SSDT functions, including NtCreateSection, NtOpenProcess, NtOpenSection, NtOpenThread, and NtSetValueKey. This allows local users to potentially cause a denial of service, leading to a system crash, and possibly gain privileges by providing invalid arguments.

Recommendations For Comodo Firewall Pro versions 2.4.16.174 and earlier, update to a version later than 2.4.16.174 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-0709

Affected Products

Comodo Firewall Pro

References · 6

• 🔥 http://securityfocus.com/bid/22357 · Exploit
• http://matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0709 · Security Note
• http://securityfocus.com/archive/1/458773/100/0/threaded · Note
• http://securitytracker.com/id?1017580 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32059 · Note