CVE-2007-1330 Security feature bypass in n/a
Local attackers can bypass Comodo Firewall Pro driver protections by guessing named pipe names, allowing unauthorized registry access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-1330?
CVE-2007-1330 is a medium-severity vulnerability in n/a, published on 7 Mar 2007. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key by guessing the name of a named pipe under \Device\NamedPipe\OLE and attempting to open it multiple times.
Which versions are affected by CVE-2007-1330?
It affects 1 product.
Products include Comodo Comodo Firewall Pro.
How do I fix CVE-2007-1330?
No fix has been published for CVE-2007-1330 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-1330 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-1330 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-4gf9-6xwj-3w66.