Secunia

Core Security Technologies has reported some vulnerabilities in Comodo Firewall Pro, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerabilities are caused due to input validation errors when handling arguments passed to the hooked SSDT functions "NtDeleteFile()", "NtCreateFile()", and "NtSetThreadContext()". These can be exploited to cause a DoS by calling the affected functions with specially crafted arguments.

The vulnerabilities are reported in version 2.4.18.184. Other versions may also be affected.

Solution
Upgrade to version 3.0.
Further details available in Customer Area

Provided and/or discovered by
Damian Saura, Anibal Sacco, Dario Menichelli, Norberto Kueffner, and Andres Blanco y Rodrigo Carvalho of Core Security Technologies

Original Advisory
CORE-2008-0320:
http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=2249

Deep Links
Links available in Customer Area