Lucene search

[email protected]CVE-2005-3560

HistoryNov 16, 2005 - 7:42 a.m.

CVE-2005-3560

2005-11-1607:42:00

[email protected]

web.nvd.nist.gov

cve

2005

3560

zone labs

zonealarm

security

bypass

javascript

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.057 Low

EPSS

Percentile

93.4%

JSON

Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the “Advanced Program Control and OS Firewall filters” setting via URLs in “HTML Modal Dialogs” (window.location.href) contained within JavaScript tags.

Affected configurations

NVD

Node

zonelabszonealarmMatch6.0

zonelabszonealarmMatch6.0pro

zonelabszonealarm_anti-spywareMatch6.0

zonelabszonealarm_anti-spywareMatch6.1

zonelabszonealarm_antivirusMatch6.0

zonelabszonealarm_security_suiteMatch6.0

CPENameOperatorVersion
zonelabs:zonealarmzonelabs zonealarmeq6.0
zonelabs:zonealarm_anti-spywarezonelabs zonealarm anti-spywareeq6.0
zonelabs:zonealarm_anti-spywarezonelabs zonealarm anti-spywareeq6.1
zonelabs:zonealarm_antiviruszonelabs zonealarm antiviruseq6.0
zonelabs:zonealarm_security_suitezonelabs zonealarm security suiteeq6.0

CPE	Name	Operator	Version
zonelabs:zonealarm	zonelabs zonealarm	eq	6.0
zonelabs:zonealarm_anti-spyware	zonelabs zonealarm anti-spyware	eq	6.0
zonelabs:zonealarm_anti-spyware	zonelabs zonealarm anti-spyware	eq	6.1
zonelabs:zonealarm_antivirus	zonelabs zonealarm antivirus	eq	6.0
zonelabs:zonealarm_security_suite	zonelabs zonealarm security suite	eq	6.0

References

secunia.com/advisories/17450

securityreason.com/securityalert/155

www.osvdb.org/20677

www.securityfocus.com/archive/1/415968

www.securityfocus.com/bid/15347

exchange.xforce.ibmcloud.com/vulnerabilities/22971

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.057 Low

EPSS

Percentile

93.4%

JSON

Related for CVE-2005-3560

nvd1 cvelist1