Lucene search
HistoryJul 14, 2005 - 4:00 a.m.
CVE-2002-1997
zonealarm
mailsafe
bypass filter
execute code
email attachments
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.024 Low
EPSS
Percentile
90.0%
ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension.
Affected configurations
Node
zonelabszonealarmMatch3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| zonelabs:zonealarm | zonelabs zonealarm | eq | 3.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.024 Low
EPSS
Percentile
90.0%
Related for CVE-2002-1997