CVE-2005-3560

Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs" (window.location.href) contained within JavaScript tags.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/17450	Vendor Advisory
http://securityreason.com/securityalert/155
http://www.osvdb.org/20677
http://www.securityfocus.com/archive/1/415968
http://www.securityfocus.com/bid/15347	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/22971

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zonelabs:zonealarm:6.0:::::::*
	cpe:2.3:a:zonelabs:zonealarm:6.0::pro:::::
	cpe:2.3:a:zonelabs:zonealarm_anti-spyware:6.0:::::::*
	cpe:2.3:a:zonelabs:zonealarm_anti-spyware:6.1:::::::*
	cpe:2.3:a:zonelabs:zonealarm_antivirus:6.0:::::::*
	cpe:2.3:a:zonelabs:zonealarm_security_suite:6.0:::::::*

History

No history.

Information

Published : 2005-11-16 07:42

Updated : 2024-02-28 10:42

NVD link : CVE-2005-3560

Mitre link : CVE-2005-3560

CVE.ORG link : CVE-2005-3560

JSON object : View

Products Affected

zonelabs

zonealarm_anti-spyware
zonealarm
zonealarm_security_suite
zonealarm_antivirus

CWE

NVD-CWE-Other

{"id": "CVE-2005-3560", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-11-16T07:42:00.000", "references": [{"url": "http://secunia.com/advisories/17450", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/155", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/20677", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/415968", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/15347", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22971", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the \"Advanced Program Control and OS Firewall filters\" setting via URLs in \"HTML Modal Dialogs\" (window.location.href) contained within JavaScript tags."}], "lastModified": "2017-07-11T01:33:13.987", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zonelabs:zonealarm:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A762470F-AD26-478D-8B83-9723061D2AF3"}, {"criteria": "cpe:2.3:a:zonelabs:zonealarm:6.0:*:pro:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "280E308A-F446-461F-9C20-92F8E83649E2"}, {"criteria": "cpe:2.3:a:zonelabs:zonealarm_anti-spyware:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "659C03E1-3F79-415C-8EF2-6CAB6158157D"}, {"criteria": "cpe:2.3:a:zonelabs:zonealarm_anti-spyware:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EC6FED8-87AC-47FF-B43B-7C096182E8FB"}, {"criteria": "cpe:2.3:a:zonelabs:zonealarm_antivirus:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7106B34-09D7-4B92-BDF0-82DE97984333"}, {"criteria": "cpe:2.3:a:zonelabs:zonealarm_security_suite:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FCE7D92E-950B-49FB-B6CD-8E870BBAD56A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}