CVE-2004-1517 Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a URL with hex encoded file extensions.
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a URL with hex encoded file extensions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zonelabs imsecure | = 1.0.0.0 | No fix listed |
| zonelabs imsecure | = 1.0.1.0 | No fix listed |
| zonelabs imsecure | = 1.0.2.0 | No fix listed |
References
- download.zonelabs.com patch vendor-advisory
- 20041111 Zone Labs IMsecure Active Link Filter Bypass mailing-list
- 13169 third-party-advisory vendor-advisory
- 11662 patch vdb-entry
- imsecure-active-link-bypass(18042) vdb-entry