Personal Firewall Protection Bypass Vulnerability

vendor:

Comodo Firewall Pro, Comodo Personal Firewall, ZoneAlarm Pro

by:

Unknown

7.5

CVSS

HIGH

Protection Bypass

264

CWE

Product Name: Comodo Firewall Pro, Comodo Personal Firewall, ZoneAlarm Pro

Affected Version From: Comodo Firewall Pro 2.4.18.184, Comodo Personal Firewall 2.3.6.81, ZoneAlarm Pro 6.1.744.001

Affected Version To: Not specified

Patch Exists: NO

Related CWE: Not specified

CPE: a:comodo:firewall_pro:2.4.18.184, cpe:/a:comodo:personal_firewall:2.3.6.81, cpe:/a:zonealarm:zonealarm_pro:6.1.744.001

Metasploit:

Other Scripts:

Platforms Tested: Not specified

Unknown

Personal Firewall Protection Bypass Vulnerability

The vulnerability allows attackers to bypass protection mechanisms implemented by personal firewall products. It occurs due to the improper implementation of protection mechanisms based on valid process identifiers. By exploiting this vulnerability, local attackers can bypass protection mechanisms and gain elevated privileges, allowing them to execute arbitrary code. Other attacks may also be possible.

Mitigation:

No mitigation or remediation steps provided

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/23987/info

Multiple personal firewall products are prone to a vulnerability that lets attackers bypass protection mechanisms. This issue occurs because the applications fail to properly implement protection mechanisms based on valid process identifiers.

Exploiting this issue allows local attackers to bypass protection mechanisms implemented to restrict access to the memory space of critical processes. This allows attackers to execute arbitrary code with elevated privileges; other attacks are also possible.

The following applications are vulnerable to this issue:
- Comodo Firewall Pro 2.4.18.184
- Comodo Personal Firewall 2.3.6.81
- ZoneAlarm Pro 6.1.744.001

Other applications and versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30039-1.zip

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30039-2.zip