Zone Labs ZoneAlarm Registry Key Local Denial Of Service Vulnerability

Bugtraq ID:	18789
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Jul 03 2006 12:00AM
Updated:	Jul 04 2006 10:49PM
Credit:	David Matousek is credited with discovering this vulnerability.
Vulnerable:	Zone Labs ZoneAlarm Security Suite 6.5.722 Zone Labs ZoneAlarm Security Suite 6.1.737
Not Vulnerable:

Zone Labs ZoneAlarm Registry Key Local Denial Of Service Vulnerability

ZoneAlarm is prone to a denial-of-service vulnerability because it fails to properly handle exceptional conditions.

A local attacker can exploit this issue to cause an error in the application and to crash the system, effectively denying service.

Zone Labs ZoneAlarm Registry Key Local Denial Of Service Vulnerability

An attacker uses the listed API functions to exploit this issue.

Zone Labs ZoneAlarm Registry Key Local Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected].

Zone Labs ZoneAlarm Registry Key Local Denial Of Service Vulnerability

References:

• Zone Labs Homepage (Zone Labs)
  
• ZoneAlarm Insufficient protection of registry key 'VETFDDNT\Enum' Vulnerability (David Matousek)
  
• ZoneAlarm Insufficient protection of registry key 'VETFDDNT\Enum' Vulnerability (David Matousek)