PT-2005-4349 · Zonealarm · Zonealarm Pro+4

Debasis Mohanty + 1 · Publicado 2005-11-16 · Atualizado 2017-07-11 · CVE-2005-3560

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZoneAlarm Pro version 6.0 ZoneAlarm Internet Security Suite version 6.0 ZoneAlarm Anti-Virus version 6.0 ZoneAlarm Anti-Spyware versions 6.0 through 6.1 ZoneAlarm version 6.0

Description The issue allows remote attackers to bypass the Advanced Program Control and OS Firewall filters setting. This can be achieved via URLs in HTML Modal Dialogs, specifically through the window.location.href property contained within JavaScript tags.

Recommendations For ZoneAlarm Pro version 6.0, update to a version that addresses this issue. For ZoneAlarm Internet Security Suite version 6.0, update to a version that addresses this issue. For ZoneAlarm Anti-Virus version 6.0, update to a version that addresses this issue. For ZoneAlarm Anti-Spyware versions 6.0 through 6.1, update to a version that addresses this issue. For ZoneAlarm version 6.0, update to a version that addresses this issue. As a temporary workaround, consider restricting the use of JavaScript tags until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-3560

Produtos afetados

Zonealarm

Zonealarm Anti-Spyware

Zonealarm Antivirus

Zonealarm Internet Security Suite

Zonealarm Pro

Referências · 8

• 🔥 http://securityfocus.com/bid/15347 · Exploit
• 🔥 https://exploit-db.com/exploits/26479 · Exploit
• http://securityreason.com/securityalert/155 · Nota
• http://secunia.com/advisories/17450 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22971 · Nota
• http://osvdb.org/20677 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3560 · Nota de Segurança
• http://securityfocus.com/archive/1/415968 · Nota