ZO
Vendor
Zonelabs
29
CVEs
0
On KEV
0
New 30D
Products
ZO5.5
Zonealarm
Zonelabs
20 CVEs0 on KEV0 new
ZS–
Zonealarm Security Suite
Zonelabs
3 CVEs0 on KEV0 new
ZA–
Zonealarm Antivirus
Zonelabs
2 CVEs0 on KEV0 new
IM–
Imsecure
Zonelabs
1 CVEs0 on KEV0 new
IN–
Integrity
Zonelabs
1 CVEs0 on KEV0 new
ZA–
Zonealarm Anti-spyware
Zonelabs
1 CVEs0 on KEV0 new
ZW–
Zonealarm Wireless Security
Zonelabs
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2007-5044 | ZO Zonealarm Zonelabs | – | Sep 24 | ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of… |
| CVE-2007-2467 | ZO Zonealarm Zonelabs | – | May 2 | ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service (system crash) by sending malformed data… |
| CVE-2007-2083 | ZO Zonealarm Zonelabs | – | Apr 18 | vsdatant.sys in Check Point Zone Labs ZoneAlarm Pro before 7.0.302.000 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local… |
| CVE-2007-0351 | ZO Zonealarm Zonelabs | – | Jan 19 | Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain the privileges of a previous system user, possibly related… |
| CVE-2006-3540 | ZS Zonealarm Security Suite Zonelabs | – | Jul 13 | Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, and possibly other versions do not properly validate RegSaveKey, RegRestoreKey, and RegDeleteKey… |
| CVE-2006-1221 | ZS Zonealarm Security Suite Zonelabs | – | Mar 14 | Untrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm's own folders before other folders… |
| CVE-2005-3560 | ZO Zonealarm Zonelabs | – | Nov 16 | Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow… |
| CVE-2005-1693 | ZO Zonealarm Zonelabs | – | May 24 | Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1,… |
| CVE-2005-0114 | ZO Zonealarm Zonelabs | – | Feb 11 | vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not… |
| CVE-2004-1517 | IM Imsecure Zonelabs | – | Dec 31 | Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a URL with hex encoded file extensions |
| CVE-2004-1534 | ZO Zonealarm Zonelabs | – | Dec 31 | ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service (application instability or system hang) via certain… |
| CVE-2004-2713 | ZO Zonealarm Zonelabs | – | Dec 31 | Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder… |
| CVE-2004-0612 | ZO Zonealarm Zonelabs | – | Dec 6 | The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote attackers to bypass the mobile code… |
| CVE-2004-0309 | IN Integrity Zonelabs | – | Nov 23 | Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before… |
| CVE-2004-1936 | ZO Zonealarm Zonelabs | – | Apr 14 | ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachments whose names contain certain non-English characters |
| CVE-2003-1309 | ZO Zonealarm Zonelabs | – | Dec 31 | The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain… |
| CVE-2002-1911 | ZO Zonealarm Zonelabs | – | Dec 31 | ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of SYN… |
| CVE-2002-1997 | ZO Zonealarm Zonelabs | – | Dec 31 | ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension |
| CVE-2001-1548 | ZO Zonealarm Zonelabs | – | Dec 31 | ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters |
| CVE-2001-0682 | ZO Zonealarm Zonelabs | 5.5 | Aug 29 | ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which prevents ZoneAlarm from starting |
| CVE-2001-1373 | ZO Zonealarm Zonelabs | – | Jul 18 | MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote attackers to send… |
| CVE-2000-0339 | ZO Zonealarm Zonelabs | – | Apr 24 | ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules |
| CVE-2000-0220 | ZO Zonealarm Zonelabs | – | Feb 24 | ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event |