ZoneAlarm personal firewall DoS

NtConnectPort API hook allows invalid pointer dereference...

[Full-Disclosure] iDEFENSE Security Advisory 02.11.05: ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability

ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability iDEFENSE Security Advisory 02.11.05 www.idefense.com/application/poi/display?id=199&type=vulnerabilities February 11, 2005 I. BACKGROUND Zone Labs ZoneAlarm provides personal firewall protection. More information is available from:...

CVE-2005-0114

vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allow...

CVE-2005-0114

vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allow...

CVE-2005-0114

ZoneAlarm/ZoneAlarm Wireless and Check Point Integrity Client are affected by an invalid pointer dereference in NtConnectPort via the ServerPortName argument, triggering a local DoS (kernel crash) in ZoneAlarm. Affected products: ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000...

CVE-2004-1534

ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service application instability or system hang via certain JavaScript...

CVE-2004-0612

The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote attackers to bypass the mobile code filtering. NOTE: it has been disputed by the vendor that this behavior is required by the SSL specification...

CVE-2004-0309

Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument...

ZoneAlarm Pro Configuration File/Directory Permission Weakness DoS

This host is running a version of ZoneAlarm Pro that contains a flaw which may allow a local denial of service. To exploit this flaw, an attacker would need to tamper with the files located in %windir%/Internet Logs. An attacker may modify them and prevent ZoneAlarm from starting up properly. C...

ZoneAlarm Personal Firewall UDP Source Port 67 Bypass

This version of ZoneAlarm contains a flaw that may allow a remote attacker to bypass the ruleset. The issue is due to ZoneAlarm not monitoring and alerting UDP traffic with a source port of 67. This allows an attacker to bypass the firewall to reach protected hosts without setting off warnings on...

CVE-2004-0309

CVE-2004-0309 is a stack-based buffer overflow in the SMTP service support (vsmon.exe) used by Zone Labs ZoneAlarm (before 4.5.538.001) and ZoneLabs Integrity client (before 4.0.146.046 and 4.5.085). The vulnerability exists in the SMTP protocol processing function and can be triggered by long RC...

CVE-2004-0309

Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument...

CVE-2004-0612

The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote attackers to bypass the mobile code filtering. NOTE: it has been disputed by the vendor that this behavior is required by the SSL specification...

CVE-2004-0612

The CVE-2004-0612 issue concerns ZoneAlarm Pro 5.0.590.015 where the Mobile Code filter fails to filter mobile code inside an SSL-encrypted session. This allows remote attackers to bypass the mobile code filtering. The description note indicates the vendor disputed whether SSL behavior complies w...

ZoneAlarm e-mail protection bypass

File is not checked if filename contains extended characters...

CVE-2004-1936

ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachments whose names contain certain non-English characters...

ZoneAlarm buffer overflow

Buffer overflow on oversized RCPT TO: in SMTP...

EEYE: ZoneLabs SMTP Processing Buffer Overflow

ZoneLabs SMTP Processing Buffer Overflow Release Date: February 18, 2004 Date Reported: February 13, 2004 Severity: Medium Local Privilege Escalation/Remote Code Execution Vendor: ZoneLabs Inc. Software Affected: ZoneAlarm 4.0 and above ZoneAlarm Pro 4.0 and above ZoneAlarm Plus 4.0 and above...

CVE-2003-1309

The DeviceIoControl function in the TrueVector Device Driver VSDATANT in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals aka "Device Driver Attack"...

SMC Router 1.2x - Random UDP Packet Denial of Service

SMC Router 1.2x - Random UDP Packet Denial of Service source: https://www.securityfocus.com/bid/8711/info A denial of service has been reported in the SMC SMC2404WBR BarricadeT Turbo 11/22 Mbps Wireless Cable/DSL Broadband Router. It is possible to trigger this condition by sending UDP packets...