| Package | Affected versions | Patched versions |
|---|---|---|
| antivirus plus firewall | = 7.5.431 | |
| comodo personal firewall | = 2.3.6.81 | |
| personal firewall | = 3.0.8686 | |
| antihook | = 3.0.23 | |
| look n stop | = 2.05p2 | |
| sygate personal firewall | = 5.6.2808 |
Filseclab Personal Firewall 3.0.0.8686 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free