返回 CVE 浏览器

CVE-2007-0708

HIGH

7.2

CVSS Severity Score

EPSS Score0.1680%

EPSS Percentile2.77th

Published2007年2月4日

Last Modified2026年4月23日

Vulnerability Description

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate in user mode for the (1) NtConnectPort and (2) NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.

Affected Platforms (CPE)

📦

Comodo

Comodo Firewall Pro

= 2.4.16.174

References & Advisories

🔗 http://securitytracker.com/id?1017580

🔗 http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php

🔗 http://www.securityfocus.com/archive/1/458773/100/0/threaded

🔗 http://www.securityfocus.com/bid/22357

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/32059

🔗 http://securitytracker.com/id?1017580

🔗 http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php

🔗 http://www.securityfocus.com/archive/1/458773/100/0/threaded

相关漏洞威胁

CVE-2007-07097.2

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate arguments that orig...

CVE-2007-27297.2

Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly...

CVE-2008-17367.2

Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) func...

CVE-2007-10514.6

Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier uses a weak cryptographic hashing function (CRC32) ...