Description
Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier uses a weak cryptographic hashing function (CRC32) to identify trusted modules, which allows local users to bypass security protections by substituting modified modules that have the same CRC32 value.
References
- 2279 third-party-advisory
- 20070215 Comodo DLL injection via weak hash function exploitation Vulnerability mailing-list
- 45243 vdb-entry
- comodofirewallpro-crc32-security-bypass(32530) vdb-entry
- http://www.matousec.com/info/advisories/Comodo-DLL-injection-via-weak-hash-function-exploitation.php
- 20070215 Comodo DLL injection via weak hash function exploitation Vulnerability mailing-list