high7.5Public exploit code
CVE-2005-3560
Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) Z…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zone Labs Zone Alarm 6.0 - Advance Program Control Bypass2005-11-07 · local · windows · Verified
Impact
Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs" (window.location.href) contained within JavaScript tags.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zonelabs | Zonealarm | Version 6.0 |
| Zonelabs | Zonealarm Anti-Spyware | Versions 6.0, 6.1 |
| Zonelabs | Zonealarm Antivirus | Version 6.0 |
| Zonelabs | Zonealarm Security Suite | Version 6.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/17450
- http://securityreason.com/securityalert/155
- http://www.osvdb.org/20677
- http://www.securityfocus.com/archive/1/415968
- http://www.securityfocus.com/bid/15347
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22971
- http://secunia.com/advisories/17450
- http://securityreason.com/securityalert/155
- http://www.osvdb.org/20677
- http://www.securityfocus.com/archive/1/415968
- http://www.securityfocus.com/bid/15347
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22971