CVE-2007-1051
Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier uses a weak cryptographic hashing function (CRC32) to identify trusted modules, which allows local users to bypass security protections by substituting modified modules that have the same CRC32 value.
| Software | From | Fixed in |
|---|---|---|
| comodo / comodo_firewall_pro | - | 2.4.17.183.x |
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052461.html
- http://osvdb.org/45243
- http://securityreason.com/securityalert/2279
- http://www.matousec.com/info/advisories/Comodo-DLL-injection-via-weak-hash-function-exploitation.php
- http://www.securityfocus.com/archive/1/460209/100/100/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32530
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime