Vulnerability Description
Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key by guessing the name of a named pipe under \Device\NamedPipe\OLE and attempting to open it multiple times.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Comodo | Comodo Firewall Pro | 2.4.16.174 |
References
- http://osvdb.org/34957
- http://securityreason.com/securityalert/2388
- http://www.matousec.com/info/advisories/Comodo-Bypassing-settings-protection-usiVendor Advisory
- http://www.securityfocus.com/archive/1/461635/100/0/threaded
- http://www.securityfocus.com/bid/22775
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32771
- http://osvdb.org/34957
- http://securityreason.com/securityalert/2388
- http://www.matousec.com/info/advisories/Comodo-Bypassing-settings-protection-usiVendor Advisory
- http://www.securityfocus.com/archive/1/461635/100/0/threaded
- http://www.securityfocus.com/bid/22775
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32771
FAQ
What is CVE-2007-1330?
CVE-2007-1330 is a vulnerability with a CVSS score of 4.4 (MEDIUM). Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key b...
How severe is CVE-2007-1330?
CVE-2007-1330 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-1330?
Check the references section above for vendor advisories and patch information. Affected products include: Comodo Comodo Firewall Pro.