CVE-2007-0709

Published: Feb 4, 2007Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate arguments that originate in user mode for the (1) NtCreateSection, (2) NtOpenProcess, (3) NtOpenSection, (4) NtOpenThread, and (5) NtSetValueKey hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.

Affected (1)

Products: Comodo: Comodo Firewall Pro

1 product

Comodo Firewall Pro

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Comodo Comodo Firewall Pro	Up to 2.4.16.174

References (10)

http://securitytracker.com/id?1017580

Source: cve@mitre.org

http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/458773/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/22357

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/32059

Source: cve@mitre.org

http://securitytracker.com/id?1017580

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/458773/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22357

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/32059

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.