CVE-2007-0708

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not...

7.2 HighPublic exploit

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate in user mode for the (1) NtConnectPort and (2) NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.

Exploit likelihood

0.67%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

Record: CVE-2007-0708
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-0708
Updated: 2026-11-02

EUVDEUVD-2007-0705 No score

Record: EUVD-2007-0705
Updated: 2026-11-03

GitHub AdvisoriesGHSA-9j58-g5f5-rp5f No score

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not...

Record: GHSA-9j58-g5f5-rp5f
Updated: 2026-11-02

Affected products

comodo firewall pro

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Comodo Firewall 2.3.6 - 'CMDMon.SYS' Multiple Denial of Service Vulnerabilities	2007-02-01

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-0708 is a high vulnerability (CVSS 7.2) in Comodo Firewall Pro, published February 4, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.67%, the 52nd percentile. No source names a fixed version.