CVE-2020-6022

CVE-2020-6022 affects Check Point ZoneAlarm (Extreme Security) prior to version 15.8.139.18543. The root cause is an authorization issue that lets a local attacker delete arbitrary files while restoring files in Anti-Ransomware. Impact described in connected docs indicates potential local data lo...

New Flaws in Top Antivirus Software Could Make Computers More Vulnerable

Cybersecurity researchers today disclosed details of security vulnerabilities found in popular antivirus solutions that could enable attackers to elevate their privileges, thereby helping malware sustain its foothold on the compromised systems. According to a report published by CyberArk research...

CVE-2020-6012

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an...

CVE-2020-6012

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an...

Privilege escalation

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an...

CVE-2020-6012

CVE-2020-6012 affects ZoneAlarm Anti-Ransomware prior to version 1.0.713, where the application copies report files from a directory with low privileges. An unprivileged user could timestampedly replace those files with malicious or linked content, potentially enabling local privilege escalation....

CVE-2020-6012

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an...

PT-2020-18887 · Zonealarm · Zonealarm Anti-Ransomware

Name of the Vulnerable Software and Affected Versions: ZoneAlarm Anti-Ransomware versions prior to 1.0.713 Description: The issue allows a sophisticated timed attacker to replace files with malicious content, enabling an unprivileged user to escalate privileges via local access. This can be...

CVE-2020-6013

ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a combination of file permission manipulation and exploitation of Windows CVE-2020-00896 on unpatched systems...

CVE-2020-6013

ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a combination of file permission manipulation and exploitation of Windows CVE-2020-00896 on unpatched systems...

Design/Logic Flaw

ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a combination of file permission manipulation and exploitation of Windows CVE-2020-00896 on unpatched systems...

CVE-2020-6013

ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a combination of file permission manipulation and exploitation of Windows CVE-2020-00896 on unpatched systems...

CVE-2020-6013

CVE-2020-6013 affects ZoneAlarm Firewall and Antivirus before version 15.8.109.18436. The root cause is privilege escalation through a combination of file permission manipulation and exploitation of Windows CVE-2020-00896 on unpatched systems. An attacker who already has access to the system can ...

Check Point ZoneAlarm Insecure Directory Permissions Vulnerability

Check Point ZoneAlarm is a network firewall program from Check Point Israel. A security vulnerability exists in the ZoneAlarm service in Check Point ZoneAlarm that originates from the program failing to adequately validate a user-supplied symbolic link before performing a file operation. An...

Check Point ZoneAlarm Symlink Following Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Check Point ZoneAlarm. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ZoneAlarm...

ZoneAlarm TrueVector Internet Monitor Insecure NTFS Permissions Vulnerability

A vulnerability was found in the TrueVector Internet Monitor service, which is installed as part of the Check Point ZoneAlarm firewall. This vulnerability allows a local attacker to cause the affected service to change the file permissions of arbitrary local files. After the file permissions have...

ZoneAlarm TrueVector Internet Monitor Insecure NTFS Permissions

------------------------------------------------------------------------ ZoneAlarm TrueVector Internet Monitor service insecure NTFS permissions vulnerability ------------------------------------------------------------------------ Yorick Koster, December 2019...

The vulnerability of clients of Check Point Endpoint Security’s comprehensive network endpoint protection solution, specifically for Windows and ZoneAlarm firewalls, stems from permission handling errors. This allows attackers to escalate their privileges.

The vulnerability of Check Point Endpoint Security Initial Client for Windows and ZoneAlarm, a network firewall, relates to permission handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through hard links from registration file archives...

Hackers Breach ZoneAlarm's Forum Site — Outdated vBulletin to Blame

ZoneAlarm, an internet security software company owned by Israeli cybersecurity firm Check Point Technologies, has suffered a data breach exposing data of its discussion forum users, the company confirmed The Hacker News. With nearly 100 million downloads, ZoneAlarm offers antivirus software,...

Hackers Breach ZoneAlarm's Forum Site — Outdated vBulletin to Blame

ZoneAlarm, an internet security software company owned by Israeli cybersecurity firm Check Point Technologies, has suffered a data breach exposing data of its discussion forum users, the company confirmed The Hacker News. With nearly 100 million downloads, ZoneAlarm offers antivirus software,...