Unrated severityNVD Advisory· Published Apr 30, 2008· Updated Jun 16, 2026
CVE-2008-1736
CVE-2008-1736
Description
Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) functions, which allows local users to cause a denial of service (system crash) via (1) a crafted OBJECT_ATTRIBUTES structure in a call to the NtDeleteFile function, which leads to improper validation of a ZwQueryObject result; and unspecified calls to the (2) NtCreateFile and (3) NtSetThreadContext functions, different vectors than CVE-2007-0709.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:comodo:comodo_personal_firewall:*:*:*:*:*:*:*:*Range: <=2.4
- Range: <3.0
Patches
Vulnerability mechanics
References
9- www.securityfocus.com/bid/28742nvdPatch
- secunia.com/advisories/30006nvdVendor Advisory
- securityreason.com/securityalert/3838nvd
- securitytracker.com/idnvd
- www.coresecurity.comnvd
- www.personalfirewall.comodo.com/release_notes.htmlnvd
- www.securityfocus.com/archive/1/491405/100/0/threadednvd
- www.vupen.com/english/advisories/2008/1383nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/42082nvd
News mentions
0No linked articles in our index yet.