Zone Labs ZoneAlarm Remote Ad-Blocking Denial Of Service Vulnerability
BID:11706
Info
Zone Labs ZoneAlarm Remote Ad-Blocking Denial Of Service Vulnerability
| Bugtraq ID: | 11706 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 19 2004 12:00AM |
| Updated: | Nov 19 2004 12:00AM |
| Credit: | The individual responsible for the discovery of this issue is currently unknown; the vendor disclosed this issue. |
| Vulnerable: |
Zone Labs ZoneAlarm Security Suite 5.5 Zone Labs ZoneAlarm Pro 5.0.590 .015 Zone Labs ZoneAlarm Pro 4.5 .538.001 Zone Labs ZoneAlarm Pro 4.5 Zone Labs ZoneAlarm Pro 4.0 |
| Not Vulnerable: |
Zone Labs ZoneAlarm Security Suite 5.5 .062 Zone Labs ZoneAlarm Pro 5.5 .062 |
Discussion
Zone Labs ZoneAlarm Remote Ad-Blocking Denial Of Service Vulnerability
A remote denial of service vulnerability affects Zone Labs ZoneAlarm. The vulnerability exists in the ad-blocking feature. This issue is due to a failure of the application to handle exceptional scripts embedded in Web sites.
It should be noted that the affected functionality is not enabled by default. This issue only affects computers with the vulnerable component activated.
An attacker may leverage this issue to cause the affected computer to become unstable and lock, potentially denying service to legitimate users.
A remote denial of service vulnerability affects Zone Labs ZoneAlarm. The vulnerability exists in the ad-blocking feature. This issue is due to a failure of the application to handle exceptional scripts embedded in Web sites.
It should be noted that the affected functionality is not enabled by default. This issue only affects computers with the vulnerable component activated.
An attacker may leverage this issue to cause the affected computer to become unstable and lock, potentially denying service to legitimate users.
Exploit / POC
Zone Labs ZoneAlarm Remote Ad-Blocking Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Zone Labs ZoneAlarm Remote Ad-Blocking Denial Of Service Vulnerability
Solution:
The vendor has released an update dealing with this issue. Users may receive the update through the automatic update functionality, or, if not activated, through the "Check For Update" option. For more information please see the references or contact the vendor.
Solution:
The vendor has released an update dealing with this issue. Users may receive the update through the automatic update functionality, or, if not activated, through the "Check For Update" option. For more information please see the references or contact the vendor.
References
Zone Labs ZoneAlarm Remote Ad-Blocking Denial Of Service Vulnerability
References:
References:
- Zone Labs Homepage (Zone Labs)
- Zone Labs Ad-Blocking Instability (Nicolas Robillard
- Zone Labs Security Advisory: Ad-Blocking Instability ("Zone Labs Product Security"