Skip to content
Noroxi

zonelabs records

23 published records for vendor zonelabs.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    23 records
    • CVE-2004-0309
      43Plan

      Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.

      CriticalCVSS 10.0No exploitEPSS 9%

      zonelabs · integrityNov 23, 2004

    • CVE-2005-1693
      42Plan

      Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Anti

      CriticalCVSS 10.0No exploitEPSS 7%

      ca · brightstor arcserve backupMay 24, 2005

    • CVE-2003-1309
      41Plan

      The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before

      CriticalCVSS 10.0No exploitEPSS 2%

      zonelabs · zonealarmDec 31, 2003

    • CVE-2005-3560
      35Monitor

      Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 thr

      HighCVSS 7.5Proof of conceptEPSS 16%

      zonelabs · zonealarmNov 16, 2005

    • CVE-2000-0339
      32Monitor

      ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rule

      HighCVSS 7.5Proof of conceptEPSS 7%

      zonelabs · zonealarmApr 24, 2000

    • CVE-2002-1997
      31Monitor

      ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing

      HighCVSS 7.5No exploitEPSS 3%

      zonelabs · zonealarmDec 31, 2002

    • CVE-2004-1936
      30Monitor

      ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachments whose names contai

      HighCVSS 7.5No exploitEPSS 2%

      zonelabs · zonealarmApr 14, 2004

    • CVE-2004-1517
      30Monitor

      Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a UR

      HighCVSS 7.5No exploitEPSS 2%

      zonelabs · imsecureDec 31, 2004

    • CVE-2007-2083
      27Monitor

      vsdatant.sys in Check Point Zone Labs ZoneAlarm Pro before 7.0.302.000 does not validate certain arguments before being passed to hooked SSD

      MediumCVSS 6.9Proof of conceptEPSS 1%

      zonelabs · zonealarmApr 17, 2007

    • CVE-2007-5044
      27Monitor

      ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which a

      MediumCVSS 6.9No exploitEPSS 0%

      zonelabs · zonealarmSep 23, 2007

    • CVE-2006-1221
      24Monitor

      Untrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm

      MediumCVSS 6.2No exploitEPSS 1%

      zonelabs · zonealarm security suiteMar 14, 2006

    • CVE-2007-0351
      24Monitor

      Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain the privileges of a p

      MediumCVSS 6.2No exploitEPSS 0%

      microsoft · windows 2003 serverJan 18, 2007

    • CVE-2001-0682
      22Monitor

      ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object

      MediumCVSS 5.5No exploitEPSS 0%

      checkpoint · zonealarm proAug 29, 2001

    • CVE-2002-1911
      21Monitor

      ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (CPU and memory consum

      MediumCVSS 5.0Proof of conceptEPSS 3%

      zonelabs · zonealarmDec 31, 2002

    • CVE-2004-1534
      21Monitor

      ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service (application inst

      MediumCVSS 5.0No exploitEPSS 2%

      zonelabs · zonealarmDec 31, 2004

    • CVE-2001-1373
      20Monitor

      MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, whi

      MediumCVSS 5.0No exploitEPSS 1%

      zonelabs · zonealarmJul 18, 2001

    • CVE-2000-0220
      20Monitor

      ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an e

      MediumCVSS 5.0No exploitEPSS 1%

      zonelabs · zonealarmFeb 24, 2000

    • CVE-2004-0612
      20Monitor

      The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote at

      MediumCVSS 5.1No exploitEPSS 1%

      zonelabs · zonealarmDec 6, 2004

    • CVE-2006-3540
      19Monitor

      Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, and possibly other versions do not properly validate RegSa

      MediumCVSS 4.9No exploitEPSS 1%

      zonelabs · zonealarm security suiteJul 12, 2006

    • CVE-2007-2467
      19Monitor

      ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service (s

      MediumCVSS 4.9No exploitEPSS 0%

      zonelabs · zonealarmMay 2, 2007

    • CVE-2001-1548
      8Monitor

      ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non

      LowCVSS 2.1No exploitEPSS 0%

      zonelabs · zonealarmDec 31, 2001

    • CVE-2005-0114
      8Monitor

      vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.12

      LowCVSS 2.1No exploitEPSS 0%

      checkpoint · check point integrity clientFeb 11, 2005

    • CVE-2004-2713
      7Monitor

      Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a deni

      LowCVSS 1.9No exploitEPSS 0%

      zonelabs · zonealarmDec 31, 2004