Back to CVE Browser

CVE-2007-1330

MEDIUM

4.4

CVSS Severity Score

EPSS Score0.0840%

EPSS Percentile33.68th

PublishedMar 7, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key by guessing the name of a named pipe under \Device\NamedPipe\OLE and attempting to open it multiple times.

Affected Platforms (CPE)

📦

Comodo

Comodo Firewall Pro

= 2.4.16.174

📦

Comodo

Comodo Firewall Pro

= 2.4.17.183

📦

Comodo

Comodo Firewall Pro

= 2.4.18.184

References & Advisories

🔗 http://osvdb.org/34957

🔗 http://securityreason.com/securityalert/2388

🔗 http://www.matousec.com/info/advisories/Comodo-Bypassing-settings-protection-using-magic-pipe.php

🔗 http://www.securityfocus.com/archive/1/461635/100/0/threaded

🔗 http://www.securityfocus.com/bid/22775

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/32771

🔗 http://osvdb.org/34957

🔗 http://securityreason.com/securityalert/2388

Related Vulnerabilities

CVE-2007-07087.2

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate...

CVE-2007-07097.2

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate arguments that orig...

CVE-2007-27297.2

Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly...

CVE-2008-17367.2

Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) func...