CVE-2007-2729: comodo comodo_firewall_pro
Vulnerability summary
CVE-2007-2729 is a high (CVSS 7.2) vulnerability in comodo comodo_firewall_pro. EPSS estimates a 0.32% chance of exploitation in the next 30 days, higher than 23.2% of scored vulnerabilities.
Timeline
- 16-05-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified identifier that is one, two, or three greater than the canonical identifier.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.32%
Chance of exploitation in the next 30 days
Percentile
23%
Versus all other CVEs
30-day change
0.00 pp
From 0.32% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Comodo2 products
- comodo_firewall_pro2.4.18.184
- comodo_personal_firewall2.3.6.81
1 vendor · 2 products