CVE-2007-2729: High severity Comodo Comodo Personal Firewall vulnerability
Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified identifier that is one, two, or three greater than the canonical identifier.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2729?
The severity of CVE-2007-2729 is considered medium, as it allows local users to exploit permissions in Comodo Firewall.
How do I fix CVE-2007-2729?
To fix CVE-2007-2729, ensure that you update to the latest version of Comodo Firewall that addresses this vulnerability.
Which versions of Comodo Firewall are affected by CVE-2007-2729?
CVE-2007-2729 affects Comodo Firewall Pro version 2.4.18.184 and Comodo Personal Firewall version 2.3.6.81, among possibly older versions.
What type of vulnerability is CVE-2007-2729?
CVE-2007-2729 is a local privilege escalation vulnerability due to improper testing of process identifiers.
Can CVE-2007-2729 be exploited remotely?
CVE-2007-2729 cannot be exploited remotely as it requires local access to the affected system.