CVE-2005-3560
First published: Wed Nov 16 2005(Updated: )
Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs" (window.location.href) contained within JavaScript tags.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zonelabs ZoneAlarm | =6.0 | |
| Zonelabs ZoneAlarm | =6.0 | |
| ZoneAlarm Anti-Spyware by Zone Labs | =6.0 | |
| ZoneAlarm Anti-Spyware by Zone Labs | =6.1 | |
| Zonelabs ZoneAlarm Antivirus | =6.0 | |
| ZoneAlarm Security Suite | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2005-3560?
CVE-2005-3560 is classified as a medium severity vulnerability.
How do I fix CVE-2005-3560?
To fix CVE-2005-3560, users should update their ZoneAlarm software to the latest version that addresses the vulnerability.
What types of ZoneAlarm products are affected by CVE-2005-3560?
CVE-2005-3560 affects ZoneAlarm Pro 6.0, ZoneAlarm Internet Security Suite 6.0, ZoneAlarm Anti-Virus 6.0, ZoneAlarm Anti-Spyware 6.0 through 6.1, and ZoneAlarm 6.0.
What exploitation method is used for CVE-2005-3560?
CVE-2005-3560 can be exploited by remote attackers through URLs in HTML Modal Dialogs.
Is there any user impact associated with CVE-2005-3560?
Yes, successful exploitation of CVE-2005-3560 allows attackers to bypass critical security features of ZoneAlarm.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/zonelabs
- canonical/zonelabs zonealarm
- version/zonelabs zonealarm/6.0
- canonical/zonealarm anti-spyware by zone labs
- version/zonealarm anti-spyware by zone labs/6.0
- version/zonealarm anti-spyware by zone labs/6.1
- canonical/zonelabs zonealarm antivirus
- version/zonelabs zonealarm antivirus/6.0
- canonical/zonealarm security suite
- version/zonealarm security suite/6.0