344 matches found
ZoneAlarm Detection
Binary data 2722.prm...
ZoneAlarm < 5.5.062.011 Multiple Vulnerabilities
Binary data 2721.prm...
CVE-2004-1534
Vulnerability details (CVE-2004-1534): ZoneAlarm and ZoneAlarm Pro before 5.5.062 with ad-blocking enabled are affected. A remote attacker could trigger a denial of service (application instability or system hang) by exploiting certain JavaScript executed from remote websites. The description and...
CVE-2004-1534
ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service application instability or system hang via certain JavaScript...
[Full-Disclosure] iDEFENSE Security Advisory 02.11.05: ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability
ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability iDEFENSE Security Advisory 02.11.05 www.idefense.com/application/poi/display?id=199&type=vulnerabilities February 11, 2005 I. BACKGROUND Zone Labs ZoneAlarm provides personal firewall protection. More information is available from:...
ZoneAlarm personal firewall DoS
NtConnectPort API hook allows invalid pointer dereference...
CVE-2005-0114
ZoneAlarm/ZoneAlarm Wireless and Check Point Integrity Client are affected by an invalid pointer dereference in NtConnectPort via the ServerPortName argument, triggering a local DoS (kernel crash) in ZoneAlarm. Affected products: ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000...
CVE-2005-0114
vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allow...
CVE-2005-0114
vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allow...
CVE-2004-1534
ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service application instability or system hang via certain JavaScript...
CVE-2004-0612
The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote attackers to bypass the mobile code filtering. NOTE: it has been disputed by the vendor that this behavior is required by the SSL specification...
CVE-2004-0309
Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument...
ZoneAlarm Pro Configuration File/Directory Permission Weakness DoS
This host is running a version of ZoneAlarm Pro that contains a flaw which may allow a local denial of service. To exploit this flaw, an attacker would need to tamper with the files located in %windir%/Internet Logs. An attacker may modify them and prevent ZoneAlarm from starting up properly. C...
ZoneAlarm Personal Firewall UDP Source Port 67 Bypass
This version of ZoneAlarm contains a flaw that may allow a remote attacker to bypass the ruleset. The issue is due to ZoneAlarm not monitoring and alerting UDP traffic with a source port of 67. This allows an attacker to bypass the firewall to reach protected hosts without setting off warnings on...
CVE-2004-0309
Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument...
CVE-2004-0309
CVE-2004-0309 is a stack-based buffer overflow in the SMTP service support (vsmon.exe) used by Zone Labs ZoneAlarm (before 4.5.538.001) and ZoneLabs Integrity client (before 4.0.146.046 and 4.5.085). The vulnerability exists in the SMTP protocol processing function and can be triggered by long RC...
CVE-2004-0612
The CVE-2004-0612 issue concerns ZoneAlarm Pro 5.0.590.015 where the Mobile Code filter fails to filter mobile code inside an SSL-encrypted session. This allows remote attackers to bypass the mobile code filtering. The description note indicates the vendor disputed whether SSL behavior complies w...
CVE-2004-0612
The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote attackers to bypass the mobile code filtering. NOTE: it has been disputed by the vendor that this behavior is required by the SSL specification...