Multiple Vendor Firewall HIPS Process Spoofing Vulnerability

Multiple Vendor Firewall HIPS Process Spoofing Vulnerability

Multiple vendor firewalls and HIPS (host-based intrusion prevention systems) are prone to a process-spoofing vulnerability.

An attacker can exploit this issue to have an arbitrary malicious program appear to run as a trusted process and function undetected on an affected victim's computer.

The following software is vulnerable; other versions may also be affected:

InfoProcess AntiHook version 3.0.0.23
AVG Anti-Virus plus Firewall version 7.5.431
Comodo Personal Firewall version 2.3.6.81
Filseclab Personal Firewall version 3.0.0.8686
Look 'n' Stop Personal Firewall version 2.05p2
Symantec Sygate Personal Firewall version 5.6.2808