Check Point · Check Point Zonealarm Extreme Security · CVE-2024-6233
**Name of the Vulnerable Software and Affected Versions**
Check Point ZoneAlarm Extreme Security (affected versions not specified)
**Description**
This issue allows local attackers to escalate privileges on affected installations. The flaw exists within the Forensic Recorder service, where an attacker can create a symbolic link to abuse the service and overwrite arbitrary files, potentially executing arbitrary code in the context of SYSTEM. An attacker must first obtain the ability to execute low-privileged code on the target system to exploit this issue.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.