Unrated severityNVD Advisory· Published Apr 30, 2008· Updated Apr 23, 2026
CVE-2008-1736
CVE-2008-1736
Description
Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) functions, which allows local users to cause a denial of service (system crash) via (1) a crafted OBJECT_ATTRIBUTES structure in a call to the NtDeleteFile function, which leads to improper validation of a ZwQueryObject result; and unspecified calls to the (2) NtCreateFile and (3) NtSetThreadContext functions, different vectors than CVE-2007-0709.
Affected products
1- cpe:2.3:a:comodo:comodo_personal_firewall:*:*:*:*:*:*:*:*Range: <=2.4
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- www.securityfocus.com/bid/28742nvdPatch
- secunia.com/advisories/30006nvdVendor Advisory
- securityreason.com/securityalert/3838nvd
- securitytracker.com/idnvd
- www.coresecurity.comnvd
- www.personalfirewall.comodo.com/release_notes.htmlnvd
- www.securityfocus.com/archive/1/491405/100/0/threadednvd
- www.vupen.com/english/advisories/2008/1383nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/42082nvd
News mentions
0No linked articles in our index yet.