CVE-2006-6620: High severity soft4ever look n stop vulnerability

Published Dec 18, 2006
·
Updated

Comodo Personal Firewall 2.3.6.81 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.

Affected Software

6 affected components
AVG Antivirus Plus Firewall=7.5.431
Comodo Comodo Personal Firewall=2.3.6.81
Filseclab Personal Firewall=3.0.8686
Infoprocess Antihook=3.0.23
Soft4Ever Look N Stop=2.05p2
Symantec Sygate Personal Firewall=5.6.2808

Event History

Dec 18, 2006
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
via NVD·11:28 AM
DescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2006-6620?

CVE-2006-6620 has a medium severity rating due to its potential to allow local users to bypass security controls.

2

How do I fix CVE-2006-6620?

To fix CVE-2006-6620, update to a newer version of Comodo Personal Firewall or apply any available patches.

3

What vulnerabilities does CVE-2006-6620 target?

CVE-2006-6620 specifically targets vulnerabilities in Comodo Personal Firewall 2.3.6.81 and other products relying on the Process Environment Block.

4

Can CVE-2006-6620 be exploited remotely?

CVE-2006-6620 cannot be exploited remotely as it requires local user access to perform the attack.

5

What systems are affected by CVE-2006-6620?

CVE-2006-6620 primarily affects systems running Comodo Personal Firewall 2.3.6.81, along with several other personal firewall applications.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203