Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-0708. PoCs published by Matousec Transparent security.
AI-analyzed exploit summary This exploit demonstrates a denial-of-service vulnerability in Comodo Firewall by calling hooked SSDT functions with invalid arguments, causing system crashes. It targets multiple functions like NtConnectPort, NtCreatePort, and others by passing malformed pointers.
Description
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate in user mode for the (1) NtConnectPort and (2) NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.
Exploits (1)
This exploit demonstrates a denial-of-service vulnerability in Comodo Firewall by calling hooked SSDT functions with invalid arguments, causing system crashes. It targets multiple functions like NtConnectPort, NtCreatePort, and others by passing malformed pointers.