PT-2004-2442 · Zonealarm · Zonealarm Pro+1

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1534

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ZoneAlarm versions prior to 5.5.062 ZoneAlarm Pro versions prior to 5.5.062

Description The issue allows remote web sites to cause a denial of service, resulting in application instability or system hang, via certain JavaScript, when ad-blocking is enabled.

Recommendations For ZoneAlarm versions prior to 5.5.062, update to version 5.5.062 or later to resolve the issue. For ZoneAlarm Pro versions prior to 5.5.062, update to version 5.5.062 or later to resolve the issue. As a temporary workaround, consider disabling ad-blocking in ZoneAlarm and ZoneAlarm Pro until a patch is available.

Fix

Related Identifiers

CVE-2004-1534

Affected Products

Zonealarm

Zonealarm Pro

References · 6

• http://download.zonelabs.com/bin/free/securityAlert/18.html · Vendor Advisory
• http://secunia.com/advisories/13244 · Vendor Advisory
• http://securityfocus.com/bid/11706 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-1534 · Security Note
• http://marc.info/?l=bugtraq&m=110088808402495&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18159 · Note