ZoneAlarm Advertising Blocking Denial of Service Vulnerability

From: JM Tella Llop [MVP Windows] (jmtella_at_XXXmvps.org)
Date: 11/21/04 

Date: Sun, 21 Nov 2004 19:10:04 +0100

ZoneAlarm Advertising Blocking Denial of Service Vulnerability

Secunia Advisory: SA13244 Print Advisory
Release Date: 2004-11-19

Critical:
Less critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch

Software: ZoneAlarm Pro 3.x
ZoneAlarm Pro 4.x
ZoneAlarm Pro 5.x
ZoneAlarm Security Suite 5.x

        Select a product and view a complete list of all Patched/Unpatched
Secunia advisories affecting it.

Description:
Nicolas Robillard has reported a vulnerability in ZoneAlarm Pro and
ZoneAlarm Security Suite, which can be exploited by malicious people
to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the Ad-Blocking feature
(disabled by default) when processing JavaScript and can be exploited
by tricking a user into visiting a malicious web site containing
specially crafted JavaScript.

Successful exploitation causes the system to become unstable or stop
responding completely.

Solution:
Update to version 5.5.062 or later via the "Check For Update" feature.

Provided and/or discovered by:
Nicolas Robillard

Original Advisory:
http://download.zonelabs.com/bin/free/securityAlert/18.html 

-- 
Jose Manuel Tella Llop
MVP - Windows
jmtella@XXXcompuserve.com   (quitar XXX)
http://www.multingles.net/jmt.htm
Este mensaje se proporciona "como está" sin garantías de ninguna 
clase, y no otorga ningún derecho.
This posting is provided "AS IS" with no warranties, and confers no 
rights.
         You assume all risk for your use.

Relevant Pages