CVE-2006-3540
First published: Thu Jul 13 2006(Updated: )
Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, and possibly other versions do not properly validate RegSaveKey, RegRestoreKey, and RegDeleteKey function calls, which allows local users to cause a denial of service (system crash) via a certain combination of these function calls with an HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VETFDDNT\Enum argument.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ZoneAlarm by Check Point | =6.1.737.000 | |
| ZoneAlarm by Check Point | =6.5.722.000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2006-3540?
CVE-2006-3540 has been classified as a medium severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2006-3540?
To mitigate CVE-2006-3540, users should update to the latest version of Check Point Zone Labs ZoneAlarm Internet Security Suite.
What versions are affected by CVE-2006-3540?
CVE-2006-3540 affects Check Point Zone Labs ZoneAlarm Internet Security Suite versions 6.1.737.000 and 6.5.722.000.
What kind of exploit does CVE-2006-3540 involve?
CVE-2006-3540 involves local users exploiting improper validation of RegSaveKey, RegRestoreKey, and RegDeleteKey function calls.
Can CVE-2006-3540 lead to system instability?
Yes, CVE-2006-3540 can cause a denial of service, which may result in system crashes.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/severity
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/zonelabs
- canonical/zonealarm by check point
- version/zonealarm by check point/6.1.737.000
- version/zonealarm by check point/6.5.722.000