CVEvulnerability

CVE-2005-3560

7.5 HIGH Published 2005-11-16 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-11-16
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs" (window.location.href) contained within JavaScript tags.

Affected configurations

• zonelabs zonealarm 6.0 • zonelabs zonealarm anti-spyware 6.0 • zonelabs zonealarm anti-spyware 6.1 • zonelabs zonealarm antivirus 6.0 • zonelabs zonealarm security suite 6.0

References

http://secunia.com/advisories/17450 Vendor Advisory
http://securityreason.com/securityalert/155 securityreason.com
http://www.osvdb.org/20677 www.osvdb.org
http://www.securityfocus.com/archive/1/415968 www.securityfocus.com
http://www.securityfocus.com/bid/15347 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/22971 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/17450 Vendor Advisory
http://securityreason.com/securityalert/155 securityreason.com
http://www.osvdb.org/20677 www.osvdb.org
http://www.securityfocus.com/archive/1/415968 www.securityfocus.com
http://www.securityfocus.com/bid/15347 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/22971 exchange.xforce.ibmcloud.com