The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device handle, which triggers a NULL pointer dereference.
http://forums.comodo.com/news-announcements-feedback-cb/comodo-backup-44123-released-t107293.0.html