CVE-2007-1330

2007-03-0721:19:00

[email protected]

web.nvd.nist.gov

comodo

firewall pro

cfp

security bypass

driver protections

named pipe

registry key

nvd

vulnerability

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key by guessing the name of a named pipe under \Device\NamedPipe\OLE and attempting to open it multiple times.

Affected configurations

NVD

Node

comodocomodo_firewall_proMatch2.4.16.174

comodocomodo_firewall_proMatch2.4.17.183

comodocomodo_firewall_proMatch2.4.18.184

CPENameOperatorVersion
comodo:comodo_firewall_procomodo comodo firewall proeq2.4.16.174
comodo:comodo_firewall_procomodo comodo firewall proeq2.4.17.183
comodo:comodo_firewall_procomodo comodo firewall proeq2.4.18.184

CPE	Name	Operator	Version
comodo:comodo_firewall_pro	comodo comodo firewall pro	eq	2.4.16.174
comodo:comodo_firewall_pro	comodo comodo firewall pro	eq	2.4.17.183
comodo:comodo_firewall_pro	comodo comodo firewall pro	eq	2.4.18.184