CVE-2007-1051

Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier is affected by a vulnerability where a weak CRC32 hashing is used to identify trusted modules, allowing local attackers to bypass protections by substituting modified modules with the same CRC32. Root cause: weak modul...

CVE-2007-1051: Undefined Security Weakness

Comodo Firewall Pro formerly Comodo Personal Firewall 2.4.17.183 and earlier uses a weak cryptographic hashing function CRC32 to identify trusted modules, which allows local users to bypass security protections by substituting modified modules that have the same CRC32 value...

[Full-disclosure] Comodo DLL injection via weak hash function exploitation Vulnerability

Hello, We would like to inform you about a vulnerability in Comodo Firewall Pro. Description: Comodo Firewall Pro former Comodo Personal Firewall implements a component control, which is based on a checksum comparison of process modules. Probably to achieve a better performance, cyclic redundancy...

Comodo firewall protection bypass

CRC32 control checksum is used for files protection making in trivial to bypass it...

Comodo Firewall 2.3/2.4 - Flawed Component Control Cryptographic Hash

source: https://www.securityfocus.com/bid/22570/info Comodo Firewall is prone to a design error in its cryptographic hashing function for component controls. Exploiting this flaw permits attackers to bypass the application's component controls. The application keeps a list of process-module...

Comodo Firewall 2.32.4 - Flawed Component Control Cryptographic Hash

Comodo Firewall 2.32.4 - Flawed Component Control Cryptographic Hash source: https://www.securityfocus.com/bid/22570/info Comodo Firewall is prone to a design error in its cryptographic hashing function for component controls. Exploiting this flaw permits attackers to bypass the application's...

Comodo Firewall CMDMon.SYS多个拒绝服务漏洞

Comodo Firewall Pro是一款防火墙应用程序。 Comodo Firewall Pro存在设计错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Comodo Firewall Pro在SSDT中HOOK多个函数，但缺少对来自用户模式中的参数数据，用户使用非法的参数调用NtConnectPort CFP 2.4.16.174不受影响, NtCreatePort CFP 2.4.16.174不受影响, NtCreateSection, NtOpenProcess, NtOpenSection, NtOpenThread...

Design/Logic Flaw

cmdmon.sys in Comodo Firewall Pro formerly Comodo Personal Firewall before 2.4.16.174 does not validate arguments that originate in user mode for the 1 NtConnectPort and 2 NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service system crash and possibly gain...

CVE-2007-0709

cmdmon.sys in Comodo Firewall Pro formerly Comodo Personal Firewall 2.4.16.174 and earlier does not validate arguments that originate in user mode for the 1 NtCreateSection, 2 NtOpenProcess, 3 NtOpenSection, 4 NtOpenThread, and 5 NtSetValueKey hooked SSDT functions, which allows local users to...

Code injection

cmdmon.sys in Comodo Firewall Pro formerly Comodo Personal Firewall 2.4.16.174 and earlier does not validate arguments that originate in user mode for the 1 NtCreateSection, 2 NtOpenProcess, 3 NtOpenSection, 4 NtOpenThread, and 5 NtSetValueKey hooked SSDT functions, which allows local users to...

CVE-2007-0708

cmdmon.sys in Comodo Firewall Pro formerly Comodo Personal Firewall before 2.4.16.174 does not validate arguments that originate in user mode for the 1 NtConnectPort and 2 NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service system crash and possibly gain...

CVE-2007-0708: Undefined Security Weakness

cmdmon.sys in Comodo Firewall Pro formerly Comodo Personal Firewall before 2.4.16.174 does not validate arguments that originate in user mode for the 1 NtConnectPort and 2 NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service system crash and possibly gain...

CVE-2007-0709

cmdmon.sys in Comodo Firewall Pro formerly Comodo Personal Firewall 2.4.16.174 and earlier does not validate arguments that originate in user mode for the 1 NtCreateSection, 2 NtOpenProcess, 3 NtOpenSection, 4 NtOpenThread, and 5 NtSetValueKey hooked SSDT functions, which allows local users to...

CVE-2007-0709: Undefined Security Weakness

cmdmon.sys in Comodo Firewall Pro formerly Comodo Personal Firewall 2.4.16.174 and earlier does not validate arguments that originate in user mode for the 1 NtCreateSection, 2 NtOpenProcess, 3 NtOpenSection, 4 NtOpenThread, and 5 NtSetValueKey hooked SSDT functions, which allows local users to...

CVE-2007-0708

Affected software : Comodo Firewall Pro (formerly Comodo Personal Firewall) prior to 2.4.16.174. Vulnerable component / root cause : cmdmon.sys, with insufficient validation of user-mode arguments for the hooked SSDT functions NtConnectPort and NtCreatePort. Impact : local users can trigger a den...

CVE-2007-0708

cmdmon.sys in Comodo Firewall Pro formerly Comodo Personal Firewall before 2.4.16.174 does not validate arguments that originate in user mode for the 1 NtConnectPort and 2 NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service system crash and possibly gain...

CVE-2007-0709

Comodo Firewall Pro (formerly Comodo Personal Firewall) versions 2.4.16.174 and earlier are affected by CVE-2007-0709 due to insufficient validation of user-mode arguments for hooked SSDT functions (NtCreateSection, NtOpenProcess, NtOpenSection, NtOpenThread, NtSetValueKey). The underlying issue ...

Comodo防火墙cmdmon.sys驱动多个本地拒绝服务漏洞

Comodo是一款功能强大的个人防火墙。 Comodo防火墙的cmdmon.sys驱动程序在处理系统调用参数时存在漏洞，本地攻击者可能利用此漏洞导致拒绝服务。 Comodo防火墙HOOK了很多SSDT中的函数，其中至少有7种情况没有验证用户态的参数。由于cmdmon.sys驱动中的错误，在调用NtConnectPort、NtCreatePort、NtCreateSection、NtOpenProcess、NtOpenSection、NtOpenThread和NtSetValueKey时可能会导致拒绝服务。 Comodo Personal Firewall 2.3.6.81 Comodo...

Comodo Firewall 2.3.6 - 'CMDMon.SYS' Multiple Denial of Service Vulnerabilities

// source: https://www.securityfocus.com/bid/22357/info Comodo Firewall is prone to multiple denial-of-service vulnerabilities because it fails to adequately validate user supplied data. Exploiting these issues may permit attackers to cause system crashes and deny service to legitimate users...

Comodo Firewall 2.3.6 - CMDMon.SYS Multiple Denial of Service Vulnerabilities

Comodo Firewall 2.3.6 - CMDMon.SYS Multiple Denial of Service Vulnerabilities // source: https://www.securityfocus.com/bid/22357/info Comodo Firewall is prone to multiple denial-of-service vulnerabilities because it fails to adequately validate user supplied data. Exploiting these issues may perm...