Back to CVE Browser

CVE-2007-0708

HIGH

7.2

CVSS Severity Score

EPSS Score0.1680%

EPSS Percentile2.77th

PublishedFeb 4, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate in user mode for the (1) NtConnectPort and (2) NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.

Affected Platforms (CPE)

📦

Comodo

Comodo Firewall Pro

= 2.4.16.174

References & Advisories

🔗 http://securitytracker.com/id?1017580

🔗 http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php

🔗 http://www.securityfocus.com/archive/1/458773/100/0/threaded

🔗 http://www.securityfocus.com/bid/22357

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/32059

🔗 http://securitytracker.com/id?1017580

🔗 http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php

🔗 http://www.securityfocus.com/archive/1/458773/100/0/threaded

Related Vulnerabilities

CVE-2007-07097.2

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate arguments that orig...

CVE-2007-27297.2

Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly...

CVE-2008-17367.2

Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) func...

CVE-2007-10514.6

Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier uses a weak cryptographic hashing function (CRC32) ...