CVE-2007-1330 Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key b...
MediumCVSS 4.4
EPSS 0.71%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key by guessing the name of a named pipe under \Device\NamedPipe\OLE and attempting to open it multiple times.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| comodo firewall pro | = 2.4.16.174 | No fix listed |
| comodo firewall pro | = 2.4.17.183 | No fix listed |
| comodo firewall pro | = 2.4.18.184 | No fix listed |
References
- 34957 vdb-entry
- 2388 third-party-advisory
- www.matousec.com vendor-advisory
- 20070301 Comodo Bypassing settings protection using magic pipe Vulnerability mailing-list
- 22775 vdb-entry
- comodofirewallpro-pipe-security-bypass(32771) vdb-entry