CVE-2005-3560

Published: Nov 16, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs" (window.location.href) contained within JavaScript tags.

Affected (6)

Products: Zonelabs: Zonealarm, Zonealarm Anti Spyware, Zonealarm Antivirus, Zonealarm Security Suite

Zonelabs

4 products

Zonealarm

Zonealarm Anti Spyware

Zonealarm Antivirus

Zonealarm Security Suite

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Zonelabs Zonealarm	Version 6.0
Zonelabs Zonealarm	Version 6.0
Zonelabs Zonealarm Anti Spyware	Version 6.0
Zonelabs Zonealarm Anti Spyware	Version 6.1
Zonelabs Zonealarm Antivirus	Version 6.0
Zonelabs Zonealarm Security Suite	Version 6.0