Check Point ZoneAlarm Extreme Security Elevation of Privilege Vulnerability

ZoneAlarm Extreme Security is a personal firewall software from Check Point Israel. An elevation of privilege vulnerability exists in versions prior to Check Point ZoneAlarm Extreme Security 15.8.211.19229, which stems from weak permissions on directories and a self-protecting driver bypass that...

Authentication flaw

Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This...