- Description
- Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key by guessing the name of a named pipe under \Device\NamedPipe\OLE and attempting to open it multiple times.
- Source
- cve@mitre.org
- NVD status
- Modified
CVSS 2.0
- Type
- Primary
- Base score
- 4.4
- Impact score
- 6.4
- Exploitability score
- 3.4
- Vector string
- AV:L/AC:M/Au:N/C:P/I:P/A:P
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:comodo:comodo_firewall_pro:2.4.16.174:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E5BB621-8FCF-47E0-8724-D3FC940FC312"
},
{
"criteria": "cpe:2.3:a:comodo:comodo_firewall_pro:2.4.17.183:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0F19574-1A12-4C96-B1DE-C63233C6A13D"
},
{
"criteria": "cpe:2.3:a:comodo:comodo_firewall_pro:2.4.18.184:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6518A7E2-C299-4985-BCAD-0A52FB9E850D"
}
],
"operator": "OR"
}
]
}
]