CVE-2005-3560 Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to by...
HighCVSS 7.5
EPSS 15.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs" (window.location.href) contained within JavaScript tags.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zonelabs zonealarm | = 6.0 | No fix listed |
| zonelabs zonealarm anti-spyware | = 6.0 | No fix listed |
| zonelabs zonealarm anti-spyware | = 6.1 | No fix listed |
| zonelabs zonealarm antivirus | = 6.0 | No fix listed |
| zonelabs zonealarm security suite | = 6.0 | No fix listed |
References
- 17450 third-party-advisory vendor-advisory
- 155 third-party-advisory
- 20677 vdb-entry
- 20051107 Zone Labs Products Advance Program Control and OS Firewall (Behavioral Based) Technology Bypass Vulnerability mailing-list
- 15347 exploit vdb-entry
- zonealarm-showhtmldialog-obtain-information(22971) vdb-entry