CVE-2007-0708
First published: Sun Feb 04 2007(Updated: )
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate in user mode for the (1) NtConnectPort and (2) NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Comodo Firewall Pro | =2.4.16.174 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php
- http://www.securityfocus.com/bid/22357
- http://securitytracker.com/id?1017580
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32059
- http://www.securityfocus.com/archive/1/458773/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2007-0708?
CVE-2007-0708 is considered a significant vulnerability that can lead to system crashes and potential unauthorized access.
How do I fix CVE-2007-0708?
To mitigate CVE-2007-0708, update to Comodo Firewall Pro version 2.4.16.174 or later.
What types of systems are affected by CVE-2007-0708?
CVE-2007-0708 affects local installations of Comodo Firewall Pro prior to version 2.4.16.174.
Can CVE-2007-0708 be exploited remotely?
CVE-2007-0708 primarily allows local users to exploit the vulnerability, not remote attackers.
What are the potential consequences of exploiting CVE-2007-0708?
Exploiting CVE-2007-0708 can result in a denial of service, potentially causing a system crash.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/last-modified-date
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/comodo
- canonical/comodo firewall pro
- version/comodo firewall pro/2.4.16.174