matousec.com (site map)

Poll

On Windows 7 (or Vista) I use

  unlimited administrator's account (57.94%)

  limited administrator's account (16.4%)

  common user's account (13.64%)

  nothing (I do not use Win 7/Vista) (14.26%)

more

results

Advisory 2007-03-01.01

Comodo Bypassing settings protection using magic pipe Vulnerability

Basic information:


Release date: March 01, 2007

Last update: March 07, 2007

Severity:Critical bugs

Character:Complete system control

Status:Unknown

Testing program: BTP00001P005CF.zip

Description:

Comodo Firewall Pro (former Comodo Personal Firewall) stores some of its internal settings in the registry key HKLM\SYSTEM\Software\Comodo\Personal Firewall. This key is protected by Comodo drivers such that other applications are not able to change the settings. This protection can be bypassed if very special conditions are met. CFP internally uses a named pipe, which name varies, but can be always determined. A process that opens this pipe many times is able to manipulate the protected settings of CFP. A proper modification of the settings will disable all protection mechanisms implemented by CFP after a reboot.

Vulnerable software:

Events:

References: