Vulnerability Details CVE-2007-0709
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate arguments that originate in user mode for the (1) NtCreateSection, (2) NtOpenProcess, (3) NtOpenSection, (4) NtOpenThread, and (5) NtSetValueKey hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.6%
CVSS Severity
CVSS v2 Score 7.2
References
- http://securitytracker.com/id?1017580
- http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php
- http://www.securityfocus.com/archive/1/458773/100/0/threaded
- http://www.securityfocus.com/bid/22357
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32059
- http://securitytracker.com/id?1017580
- http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php
- http://www.securityfocus.com/archive/1/458773/100/0/threaded
- http://www.securityfocus.com/bid/22357
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32059
Products affected by CVE-2007-0709
-
cpe:2.3:a:comodo:comodo_firewall_pro:*