Unscored severity · published Mar 7, 2007
CVE-2007-1330
Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal…
–
CVSS
0.7%
EPSS
No
On KEV
Description
Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key by guessing the name of a named pipe under \Device\NamedPipe\OLE and attempting to open it multiple times.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Comodo Firewall Pro · Comodo
2.4.16.174; 2.4.17.183; 2.4.18.184 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1330
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1330
osvdb.org
http://osvdb.org/34957
securityreason.com
http://securityreason.com/securityalert/2388
Vendor Advisory
http://www.matousec.com/info/advisories/Comodo-Bypassing-settings-protection-using-magic-pipe.php
www.securityfocus.com
http://www.securityfocus.com/archive/1/461635/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/22775
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32771
More from Comodo Firewall Pro
–
CVE-2007-2729
Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for…
–
CVE-2007-2730
Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and…
–
CVE-2007-1051
Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier uses a weak cryptographic hashing function (CRC32) to identify trusted modules, which allows local…
–
CVE-2007-0708
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate in user mode for the (1) NtConnectPort and (2)…
–
CVE-2007-0709
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate arguments that originate in user mode for the (1) NtCreateSection,…