PatchTheCVEpersonal firewall vulnerabilities and fixes
Recent CVEs affecting personal firewall, with upgrade or downgrade steps. 20 tracked.
Also searched as: personalfirewall.
personal firewall has 20 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2009-07-13. Highest priority: CVE-2005-1062 (score 48/100).
- CVE-2009-2450 HIGH 7.2 UPGRADE UPGRADE The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12
- CVE-2008-3174 MEDIUM 5.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as u
- CVE-2007-4967 MEDIUM 4.4 DOWNGRADE Online Armor Personal Firewall 2.0.1.215 does not properly validate certain parameters to System Service Descr
- CVE-2006-6623 HIGH 7.2 DOWNGRADE DOWNGRADE Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block (PEB) to identify a process, which a
- CVE-2006-6622 HIGH 7.2 DOWNGRADE DOWNGRADE Soft4Ever Look 'n' Stop (LnS) 2.05p2 before 20061215 relies on the Process Environment Block (PEB) to identify
- CVE-2006-6621 HIGH 7.2 DOWNGRADE DOWNGRADE Filseclab Personal Firewall 3.0.0.8686 relies on the Process Environment Block (PEB) to identify a process, wh
- CVE-2006-6620 HIGH 7.2 DOWNGRADE DOWNGRADE Comodo Personal Firewall 2.3.6.81 relies on the Process Environment Block (PEB) to identify a process, which a
- CVE-2006-6619 HIGH 7.2 DOWNGRADE DOWNGRADE AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, whic
- CVE-2006-6618 HIGH 7.2 DOWNGRADE DOWNGRADE AntiHook 3.0.0.23 - Desktop relies on the Process Environment Block (PEB) to identify a process, which allows
- CVE-2006-5153 MEDIUM 5.0 DOWNGRADE The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not vali
- CVE-2006-3787 LOW 2.1 UPGRADE kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThre
- CVE-2005-3286 LOW 2.1 DOWNGRADE DOWNGRADE The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial
- CVE-2005-1063 MEDIUM 5.0 DOWNGRADE DOWNGRADE The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, a
- CVE-2005-1062 HIGH 7.5 DOWNGRADE DOWNGRADE The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, a
- CVE-2005-0964 MEDIUM 4.6 DOWNGRADE Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules
- CVE-2004-2329 HIGH 7.2 DOWNGRADE Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via th
- CVE-2004-1658 MEDIUM 4.6 DOWNGRADE Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application
- CVE-2004-1109 MEDIUM 5.0 DOWNGRADE The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of
- CVE-2003-1491 HIGH 7.5 DOWNGRADE Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), whic
- CVE-2002-2161 MEDIUM 5.0 DOWNGRADE Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to cause a denial of service (hang and
FAQ
How do I fix personal firewall vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is personal firewall being exploited right now?
None of the tracked personal firewall CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which personal firewall CVE should I patch first?
CVE-2005-1062 currently ranks highest (48/100): The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, a.