CVE-2002-1997: High severity Zonelabs ZoneAlarm vulnerability
Published Dec 31, 2002
·Updated
ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension.
Affected Software
1 affected component
Zonelabs ZoneAlarm=3.0
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityAffected Software
Jul 14, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1997?
CVE-2002-1997 has a medium severity rating due to its potential for remote code execution.
2
How do I fix CVE-2002-1997?
To fix CVE-2002-1997, upgrade to a newer version of ZoneAlarm that addresses this vulnerability.
3
What are the impact consequences of CVE-2002-1997?
The impact of CVE-2002-1997 includes the risk of arbitrary code execution via specially crafted email attachments.
4
Which versions of ZoneAlarm are affected by CVE-2002-1997?
CVE-2002-1997 affects ZoneAlarm Pro 3.0 specifically.
5
Can CVE-2002-1997 exploit denial of service?
CVE-2002-1997 does not directly lead to denial of service but could allow an attacker to execute malicious code.