CVE-2007-1330

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 0.7%

from disclosure to weapon0 days

Published on NVDMar 7

1st PoCMar 1

exploitation probability

0.7%top 50% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key by guessing the name of a named pipe under \Device\NamedPipe\OLE and attempting to open it multiple times.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/29695

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/34957 http://securityreason.com/securityalert/2388 https://exchange.xforce.ibmcloud.com/vulnerabilities/32771 http://www.matousec.com/info/advisories/Comodo-Bypassing-settings-protection-using-magic-pipe.php http://www.securityfocus.com/archive/1/461635/100/0/threaded http://www.securityfocus.com/bid/22775