exploitDog

CVE-2005-3560

Опубликовано: 16 нояб. 2005

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs" (window.location.href) contained within JavaScript tags.

Ссылки

http://secunia.com/advisories/17450
Vendor Advisory
http://securityreason.com/securityalert/155
http://www.osvdb.org/20677
http://www.securityfocus.com/archive/1/415968
http://www.securityfocus.com/bid/15347
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/22971
http://secunia.com/advisories/17450
Vendor Advisory
http://securityreason.com/securityalert/155
http://www.osvdb.org/20677
http://www.securityfocus.com/archive/1/415968
http://www.securityfocus.com/bid/15347
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/22971

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zonelabs:zonealarm:6.0:*:*:*:*:*:*:*

cpe:2.3:a:zonelabs:zonealarm:6.0:*:pro:*:*:*:*:*

cpe:2.3:a:zonelabs:zonealarm_anti-spyware:6.0:*:*:*:*:*:*:*

cpe:2.3:a:zonelabs:zonealarm_anti-spyware:6.1:*:*:*:*:*:*:*

cpe:2.3:a:zonelabs:zonealarm_antivirus:6.0:*:*:*:*:*:*:*

cpe:2.3:a:zonelabs:zonealarm_security_suite:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.13588

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-c924-vw78-h587

github

больше 4 лет назад

Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs" (window.location.href) contained within JavaScript tags.

EPSS

Процентиль: 96%

0.13588

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other