How severe is CVE-2007-0709?

CVE-2007-0709 has a CVSS 2.0 base score of 7.2, rated high severity.

Is CVE-2007-0709 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (37th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-0709?

CVE-2007-0709 affects Comodo Comodo Firewall Pro. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2007-0709?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2007-0709 published?

CVE-2007-0709 was published on 2007-02-04 and last updated on 2026-06-16.

CVE-2007-0709

CVE-2007-0709 is a high-severity vulnerability in Comodo Comodo Firewall Pro with a CVSS 2.0 base score of 7.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.2)
EPSS exploit prediction: 0% (37th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Comodo Comodo Firewall Pro
Published: 2007-02-04
Last modified: 2026-06-16

Description

cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate arguments that originate in user mode for the (1) NtCreateSection, (2) NtOpenProcess, (3) NtOpenSection, (4) NtOpenThread, and (5) NtSetValueKey hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.

Frequently asked questions

What is CVE-2007-0709?: cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate arguments that originate in user mode for the (1) NtCreateSection, (2) NtOpenProcess, (3) NtOpenSection, (4) NtOpenThread, and (5) NtSetValueKey hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.
How severe is CVE-2007-0709?: CVE-2007-0709 has a CVSS 2.0 base score of 7.2, rated high severity.
Is CVE-2007-0709 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (37th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-0709?: CVE-2007-0709 affects Comodo Comodo Firewall Pro. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2007-0709?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2007-0709 published?: CVE-2007-0709 was published on 2007-02-04 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:comodo:comodo_firewall_pro:*:*:*:*:*:*:*:*

More vulnerabilities in Comodo Comodo Firewall Pro

CVE-2007-2729 — High (CVSS 7.2): Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do…
CVE-2007-2730 — High (CVSS 7.2): Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process identifiers for certain…
CVE-2007-0708 — High (CVSS 7.2): cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments…
CVE-2007-1051 — Medium (CVSS 4.6): Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier uses a weak cryptographic hashing…
CVE-2007-1330 — Medium (CVSS 4.4): Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass…

All CVEs affecting Comodo Comodo Firewall Pro →