CVE-2019-8453

Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client...

CVE-2019-8455

The CVE-2019-8455 entry concerns Check Point ZoneAlarm (up to version 15.4.062). A hard-link created from the log file to any system file can cause the linked file’s permissions to be changed to grant access to all users, enabling a local attacker to gain higher privileges on targeted files. Conn...

CVE-2019-8455

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file...

Check Point ZoneAlarm Permission Permit Access Control Vulnerability

Check Point ZoneAlarm is a network firewall program from Check Point Israel. A privilege access control vulnerability exists in Check Point ZoneAlarm 15.3.064.17729 and prior versions. A local attacker can exploit this vulnerability to execute arbitrary code as the SYSTEM user...

CVE-2018-8790

Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM...

Code injection

Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM...

CVE-2018-8790

Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM...

CVE-2018-8790

Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM...

CVE-2018-8790

Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM...

CVE-2018-8790

CVE-2018-8790 affects Check Point ZoneAlarm 15.3.064.17729 and earlier, where a WCF service is exposed that enables a local, low-privileged user to execute arbitrary code with SYSTEM privileges. The description in the CVE confirms the vulnerability vector and impact as SYSTEM remote code executio...

Check Point ZoneAlarm 8.8.1.110 - Local Privilege Escalation Exploit

Exploit for windows platform in category local exploits Exploit Title: Check Point ZoneAlarm Local Privilege Escalation Exploit Author: Chris Anastasio Vendor Homepage: https://www.zonealarm.com/software/free-antivirus/ Software Link: Vulnerable Versions included in repo Version: ZoneAlarm Free...

Check Point ZoneAlarm 8.8.1.110 - Local Privilege Escalation

Check Point ZoneAlarm 8.8.1.110 - Local Privilege Escalation Exploit Title: Check Point ZoneAlarm Local Privilege Escalation Date: 1/16/19 Exploit Author: Chris Anastasio Vendor Homepage: https://www.zonealarm.com/software/free-antivirus/ Software Link: Vulnerable Versions included in repo Versio...

Check Point ZoneAlarm 8.8.1.110 - Local Privilege Escalation

Exploit Title: Check Point ZoneAlarm Local Privilege Escalation Date: 1/16/19 Exploit Author: Chris Anastasio Vendor Homepage: https://www.zonealarm.com/software/free-antivirus/ Software Link: Vulnerable Versions included in repo Version: ZoneAlarm Free Antivirus + Firewall version: 15.3.064.1772...

MS08-037: Description of the security update for DNS in Windows Server 2003, in Windows XP, and in Windows 2000 Server (client side): July 8, 2008

MS08-037: Description of the security update for DNS in Windows Server 2003, in Windows XP, and in Windows 2000 Server client side: July 8, 2008 INTRODUCTION Microsoft has released security bulletin MS08-037. To view the complete security bulletin, visit one of the following Microsoft Web sites:...

Check Point ZoneAlarm Extreme Security vsdatant Kernel Driver Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Check Point ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

zonealarm.com XSS vulnerability

Vulnerable URL: https://www.zonealarm.com/security/addToCartFromLink.htm?cid=';function encodealert'OPENBUGBOUNTY';// Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Check Point response to ZoneAlarm DLL injection

...

ZoneAlarm DLL Hijacking

Hi @ll, the executable installers ZASPSetupWeb141011000.exe and zafwSetupWeb141011000.exe load and execute at least UXTheme.dll, WindowsCodecs.dll and ProfAPI.dll from their "application directory". For software downloaded with a web browser the application directory is typically the user's...

Kaspersky AntiVirus - ThinApp Parser Stack Buffer Overflow

Kaspersky AntiVirus - ThinApp Parser Stack Buffer Overflow Source: https://code.google.com/p/google-security-research/issues/detail?id=518 A remotely exploitable stack buffer overflow in ThinApp container parsing. Kaspersky Antivirus I've tested version 15 and 16 and other products using the...

Kaspersky AntiVirus - ThinApp Parser Stack Buffer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=518 A remotely exploitable stack buffer overflow in ThinApp container parsing. Kaspersky Antivirus I've tested version 15 and 16 and other products using the Kaspersky Engine such as ZoneAlarm are affected. Proof of...