CVE

Id
24065  
CVE No.
CVE-2007-0708  
Status
Candidate  
Description
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate in user mode for the (1) NtConnectPort and (2) NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.  
Phase
Assigned (20070203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
234622 24065 CVE-2007-0708 BUGTRAQ:20070201 Comodo Multiple insufficient argument validation of hooked SSDT function Vulnerability  View
234623 24065 CVE-2007-0708 URL:http://www.securityfocus.com/archive/1/archive/1/458773/100/0/threaded  View
234624 24065 CVE-2007-0708 MISC:http://www.matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php  View
234625 24065 CVE-2007-0708 BID:22357  View
234626 24065 CVE-2007-0708 URL:http://www.securityfocus.com/bid/22357  View
234627 24065 CVE-2007-0708 SECTRACK:1017580  View
234628 24065 CVE-2007-0708 URL:http://securitytracker.com/id?1017580  View
234629 24065 CVE-2007-0708 XF:comodofirewallpro-cmdmon-dos(32059)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51459 JVNDB-2007-000121 Apple Mac OS X の Bonjour に関するサービス運用妨害 (DoS) の脆弱性 Apple iChat には、Bonjour に関するサービス運用妨害 (DoS) を引き起こす脆弱性が存在します。この脆弱性の詳細は不明ですが、 CVE-2007-0614 に関連する可能性があります。 CVE-2007-0710 24065 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000121.html  View