CVE-2008-1736

3 documents3 sources
Severity
7.2HIGH
EPSS
0.1%
top 81.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Comodo Comodo Personal Firewall
Timeline
PublishedApr 30
Latest updateMay 1

Description

Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) functions, which allows local users to cause a denial of service (system crash) via (1) a crafted OBJECT_ATTRIBUTES structure in a call to the NtDeleteFile function, which leads to improper validation of a ZwQueryObject result; and unspecified calls to the (2) NtCreateFile and (3) NtSetThreadContext functions, different vectors than CVE-2007-0709.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-xwmv-w8ff-6vr2: Comodo Firewall Pro before 3↗2022-05-01
▶
CVEList
CVE-2008-1736: Comodo Firewall Pro before 3↗2008-04-29
▶
CVE-2008-1736 (HIGH CVSS 7.2) | Comodo Firewall Pro before 3.0 does | cvebase.io