medium4.4Public exploit code
CVE-2007-1330
Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Softwar…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Comodo Firewall Pro 2.4.x - Local Protection Mechanism Bypass2007-03-01 · local · windows · Verified
Impact
Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key by guessing the name of a named pipe under \Device\NamedPipe\OLE and attempting to open it multiple times.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comodo | Comodo Firewall Pro | Versions 2.4.16.174, 2.4.17.183, 2.4.18.184 |
References
- NVD record
- CVE.org record
- http://osvdb.org/34957
- http://securityreason.com/securityalert/2388
- http://www.matousec.com/info/advisories/Comodo-Bypassing-settings-protection-using-magic-pipe.php
- http://www.securityfocus.com/archive/1/461635/100/0/threaded
- http://www.securityfocus.com/bid/22775
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32771
- http://osvdb.org/34957
- http://securityreason.com/securityalert/2388
- http://www.matousec.com/info/advisories/Comodo-Bypassing-settings-protection-using-magic-pipe.php
- http://www.securityfocus.com/archive/1/461635/100/0/threaded
- http://www.securityfocus.com/bid/22775
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32771