CVEブラウザに戻る

CVE-2007-0709

HIGH

7.2

CVSS Severity Score

EPSS Score0.0680%

EPSS Percentile18.29th

Published2007年2月4日

Last Modified2026年4月23日

Vulnerability Description

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate arguments that originate in user mode for the (1) NtCreateSection, (2) NtOpenProcess, (3) NtOpenSection, (4) NtOpenThread, and (5) NtSetValueKey hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.

Affected Platforms (CPE)

📦

Comodo

Comodo Firewall Pro

<= 2.4.16.174

References & Advisories

🔗 http://securitytracker.com/id?1017580

🔗 http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php

🔗 http://www.securityfocus.com/archive/1/458773/100/0/threaded

🔗 http://www.securityfocus.com/bid/22357

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/32059

🔗 http://securitytracker.com/id?1017580

🔗 http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php

🔗 http://www.securityfocus.com/archive/1/458773/100/0/threaded

関連する脆弱性情報

CVE-2007-07087.2

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate...

CVE-2007-27297.2

Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly...

CVE-2008-17367.2

Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) func...

CVE-2007-10514.6

Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier uses a weak cryptographic hashing function (CRC32) ...