Zonelabs Zonealarm Vulnerabilidad

Versión

3.0	4
4.0	4
2.4	4
2.6	4
2.2.10	2

Contramedidas

Official Fix	20
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	4

Explotabilidad

High	0
Functional	0
Proof-of-Concept	10
Unproven	0
Not Defined	14

Vector de acceso

Not Defined	0
Physical	0
Local	4
Adjacent	2
Network	18

Autenticación

Not Defined	0
High	0
Low	6
None	18

La interacción del usuario

Not Defined	0
Required	0
None	24

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	8
≤6	4
≤7	4
≤8	6
≤9	0
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	6
≤6	6
≤7	6
≤8	2
≤9	0
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	8
≤6	4
≤7	4
≤8	6
≤9	0
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	2
<2k	2
<5k	12
<10k	0
<25k	6
<50k	2
<100k	0
≥100k	0

Explotar hoy

<1k	24
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

Affected Versions (30): 1.0, 2.0.26, 2.1, 2.2, 2.2.1, 2.3, 2.4, 2.5, 2.6, 3.0, 3.1, 3.7, 3.7.202, 3.7.211, 4.0, 4.5, 4.5.538.001, 5.0, 5.0.590.01, 5.0.590.015, 5.5.062, 5.5.062.011, 5.5.08, 6.0, 6.1, 6.1.744.001, 6.5.722, 6.5.737, 7.0.302, 7.0.362

Tipo de software: Firewall Software

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2007-09-18	8.4	8.4	ZoneLabs ZoneAlarm Function (ssdt) escalada de privilegios	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2007-5044
2007-05-01	6.2	5.4	ZoneLabs ZoneAlarm Device Driver denegación de servicio	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2007-2467
2006-07-12	6.2	6.2	ZoneLabs Zonealarm Security Suite these denegación de servicio	$0-$5k	$0-$5k	Not Defined	Unavailable	0.00	CVE-2006-3540
2005-11-08	5.6	5.2	ZoneLabs ZoneAlarm MSHTML.DLL ShowHTMLDialog Remote Code Execution	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.04	CVE-2005-3560
2005-05-24	7.3	6.6	ZoneLabs ZoneAlarm Vet Antivirus Engine VetE.dll Remote Code Execution	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2005-1693
2005-02-11	4.3	3.9	ZoneLabs ZoneAlarm NtConnectPort denegación de servicio	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2005-0114
2004-12-31	5.3	5.1	ZoneLabs ZoneAlarm denegación de servicio	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2004-1534
2004-12-06	5.6	5.6	ZoneLabs ZoneAlarm Mobile Code Filter escalada de privilegios	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2004-0612
2004-11-19	9.8	9.4	ZoneLabs ZoneAlarm Ad-Blocking Javascript desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2004-1053
2004-08-20	4.0	3.8	ZoneLabs ZoneAlarm escalada de privilegios	$0-$5k	$0-$5k	Proof-of-Concept	Workaround	0.00	CVE-2004-2713