[转贴]Validation problems also affect Comodo firewall

显示全部楼层 · 发表于 2007-2-1 20:16:12

来源：www.matousec.com

Comodo Firewall Pro (former Comodo Personal Firewall) is another firewall that fails to validate input arguments of hooked SSDT functions. Due to bugs in its driver cmdmon.sys, user mode calls of hooked functions may cause blue screens. Similar vulnerabilities are common in today's personal firewalls, although the necessity of an input validation is known for years.

[ 本帖最后由 ubuntu 于 2007-2-1 20:19 编辑 ]

显示全部楼层 · 发表于 2007-2-2 14:03:28

蓝屏总比泄密好

显示全部楼层 · 发表于 2007-2-3 17:29:50

确实，会HOOK SSDT表，偶说怎么偶如此纯净的系统用ICESWORD看SSDT会出现红色。以前一直以为只有无耻的流氓才会HOOK SSDT，现在才发现好多防火墙都会HOOK

。

[ 本帖最后由星之梦于 2007-2-6 11:10 编辑 ]