PT-2003-2254 · Zonealarm · Zonealarm Pro+3

Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1309

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ZoneAlarm versions prior to 3.7.211 ZoneAlarm Pro versions prior to 4.0.146.029 ZoneAlarm Plus versions prior to 4.0.146.029

Description The issue allows local users to gain privileges via certain signals to the DeviceIoControl function in the TrueVector Device Driver (VSDATANT).

Recommendations For ZoneAlarm versions prior to 3.7.211, update to version 3.7.211 or later. For ZoneAlarm Pro versions prior to 4.0.146.029, update to version 4.0.146.029 or later. For ZoneAlarm Plus versions prior to 4.0.146.029, update to version 4.0.146.029 or later.

Exploit

Correção

Identificadores relacionados

CVE-2003-1309

Produtos afetados

Truevector Device Driver

Zonealarm

Zonealarm Plus

Zonealarm Pro

Referências · 10

• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0070.html · Exploit
• http://sec-labs.hack.pl/papers/win32ddc.php · Nota
• http://sec-labs.hack.pl/advisories/seclabs-adv-zone-alarm-04-08-2003.txt · Nota
• http://osvdb.org/2375 · Aviso do Fabricante
• http://secunia.com/advisories/9459 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12824 · Nota
• http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html · Nota
• http://osvdb.org/4362 · Aviso do Fabricante
• http://securityfocus.com/bid/8342 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-1309 · Nota de Segurança