CVE-2007-0708

EPSS 0.16%
Veröffentlicht 04.02.2007 00:28:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate in user mode for the (1) NtConnectPort and (2) NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Comodo ≫ Comodo Firewall Pro Version2.4.16.174

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.16%	0.379

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://securitytracker.com/id?1017580

http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php

http://www.securityfocus.com/archive/1/458773/100/0/threaded

http://www.securityfocus.com/bid/22357

https://exchange.xforce.ibmcloud.com/vulnerabilities/32059

https://nvd.nist.gov/vuln/detail/CVE-2007-0708

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-0708

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-0708

EUVD