CVE-2007-1330

Severity: medium (CVSS 4.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-03-07 · updated 2026-06-16

Description

Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key by guessing the name of a named pipe under \Device\NamedPipe\OLE and attempting to open it multiple times.

Affected products

Comodo Firewall Pro: 2.4.16.174, 2.4.17.183, 2.4.18.184

References

http://osvdb.org/34957
http://securityreason.com/securityalert/2388
http://www.matousec.com/info/advisories/Comodo-Bypassing-settings-protection-using-magic-pipe.php
http://www.securityfocus.com/archive/1/461635/100/0/threaded
http://www.securityfocus.com/bid/22775
https://exchange.xforce.ibmcloud.com/vulnerabilities/32771
http://osvdb.org/34957
http://securityreason.com/securityalert/2388
http://www.matousec.com/info/advisories/Comodo-Bypassing-settings-protection-using-magic-pipe.php
http://www.securityfocus.com/archive/1/461635/100/0/threaded
http://www.securityfocus.com/bid/22775
https://exchange.xforce.ibmcloud.com/vulnerabilities/32771

Get alerted when CVE-2007-1330 or the next vulnerability affects your stack