CVE-2004-1534 ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service (application instability or system hang) via certain JavaScript.
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service (application instability or system hang) via certain JavaScript.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zonelabs zonealarm | = 4.0 | No fix listed |
| zonelabs zonealarm | = 4.5 | No fix listed |
| zonelabs zonealarm | = 4.5.538.001 | No fix listed |
| zonelabs zonealarm | = 5.0.590.015 | No fix listed |
| zonelabs zonealarm | = 5.5 | No fix listed |
References
- download.zonelabs.com patch vendor-advisory
- 20041118 Zone Labs Ad-Blocking Instability mailing-list
- 13244 patch third-party-advisory vendor-advisory
- 11706 patch vdb-entry
- zonealarm-adblock-dos(18159) vdb-entry