Exploit Multiple Personal Firewall Products - Local Protection Mechanism Bypass

[Exploiter]

EDB-ID

30039

Проверка EDB

1. Пройдено

Автор

MATOUSEC TRANSPARENT SECURITY

Тип уязвимости

LOCAL

Платформа

MULTIPLE

CVE

N/A

Дата публикации

2007-05-15

source: https://www.securityfocus.com/bid/23987/info

Multiple personal firewall products are prone to a vulnerability that lets attackers bypass protection mechanisms. This issue occurs because the applications fail to properly implement protection mechanisms based on valid process identifiers.

Exploiting this issue allows local attackers to bypass protection mechanisms implemented to restrict access to the memory space of critical processes. This allows attackers to execute arbitrary code with elevated privileges; other attacks are also possible.

The following applications are vulnerable to this issue:
- Comodo Firewall Pro 2.4.18.184
- Comodo Personal Firewall 2.3.6.81
- ZoneAlarm Pro 6.1.744.001

Other applications and versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30039-1.zip

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30039-2.zip