PT-2003-2254 · Zonealarm · Zonealarm Pro+3

Published 2003-12-31 · Updated 2017-07-29 · CVE-2003-1309

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ZoneAlarm versions prior to 3.7.211 ZoneAlarm Pro versions prior to 4.0.146.029 ZoneAlarm Plus versions prior to 4.0.146.029

Description The issue allows local users to gain privileges via certain signals to the DeviceIoControl function in the TrueVector Device Driver (VSDATANT).

Recommendations For ZoneAlarm versions prior to 3.7.211, update to version 3.7.211 or later. For ZoneAlarm Pro versions prior to 4.0.146.029, update to version 4.0.146.029 or later. For ZoneAlarm Plus versions prior to 4.0.146.029, update to version 4.0.146.029 or later.

Exploit

Fix

Related Identifiers

CVE-2003-1309

Affected Products

Truevector Device Driver

Zonealarm

Zonealarm Plus

Zonealarm Pro

References · 10

• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0070.html · Exploit
• http://osvdb.org/2375 · Vendor Advisory
• http://secunia.com/advisories/9459 · Vendor Advisory
• http://osvdb.org/4362 · Vendor Advisory
• http://securityfocus.com/bid/8342 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1309 · Security Note
• http://sec-labs.hack.pl/papers/win32ddc.php · Note
• http://sec-labs.hack.pl/advisories/seclabs-adv-zone-alarm-04-08-2003.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12824 · Note
• http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html · Note