ZoneAlarm RCPT TO Buffer Overflow Vulnerability (VU#619982) Advisory and Patch Guide

Key Information Summary Vulnerability Overview Vulnerability ID: VU#619982 Original Release Date: 2004-02-24 Last Revised Date: 2004-02-24 Vulnerability Description Issue: Zone Labs desktop security products contain a buffer overflow vulnerability in the code handling RCPT TO command parameters. Impact: Attackers can exploit this vulnerability to execute arbitrary code with SYSTEM privileges. Exploitability: Remotely exploitable; attackers can trigger the vulnerability by sending specially crafted email messages. Solution Update: Users of ZoneAlarm, ZoneAlarm Plus, and ZoneAlarm Pro should upgrade to version 4.5.538.001. Update Steps: - Select “Overview > Preferences”. - In the “Check for Updates” section, choose an update option. - Automatic update option: Zone Labs security software will automatically notify users when updates are available. - Manual update option: Monitor the status tab for updates, and click “Check for Update” to initiate an immediate update check. Additional Information Severity Metric: 10.94 Public Disclosure Date: 2004-02-13 Initial Release Date: 2004-02-24 Vulnerability Reporter: eEye Digital Security Reference Links http://www.eeye.com/html/Research/Advisories/AD20040219.html http://www.eeye.com/html/Research/Upcoming/20040213-2.html http://download.zonelabs.com/bin/free/securityAlert/8.html http://secunia.com/advisories/10921/ ``` These details simplify the understanding and actionability of the vulnerability report, highlighting the main points a security professional would need to address the issue effectively.

Goal Reached Thanks to every supporter — we hit 100%!

ZoneAlarm RCPT TO Buffer Overflow Vulnerability (VU#619982) Advisory and Patch Guide