CVE-2019-8453
17.04.2019, 15:29
Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client.Enginsight
| Vendor | Product | Version |
|---|---|---|
| checkpoint | zonealarm | 𝑥 ≤ 15.4.062 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-114 - Process ControlExecuting commands or loading libraries from an untrusted source or in an untrusted environment can cause an application to execute malicious commands (and payloads) on behalf of an attacker.
- CWE-426 - Untrusted Search PathThe application searches for critical resources using an externally-supplied search path that can point to resources that are not under the application's direct control.