Zonealarm vulnerabilitiesRanked by how likely they are to be used.
Zonealarm is made by Checkpoint. We track 14 published vulnerabilities listed under that exact name, across 46 versions. None of them is on the list of flaws known to be exploited today. Checkpoint lists newer releases under their own names, such as Zonealarm Extreme Security, so check those pages too.
We keep watching the known-exploited list.
Is Zonealarm listed under other names? Yes.
Checkpoint also lists Zonealarm under more specific names, such as Zonealarm Extreme Security and Zonealarm Anti-Ransomware. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
Which Zonealarm vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Zonealarm's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Zonealarm flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 2.0%CVE-2008-7025Medium
TrueVector in Check Point ZoneAlarm 8.0.020.000, with vsmon.exe running, allows remote HTTP proxies to cause a denial of service (crash) and disable the HIDS module via a crafted response.
- 1.1%CVE-2008-7009Medium
Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via a file or directory with a long path.
- 1.0%CVE-2019-8452High
A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to any file on the system will get its permission changed so that...
- 0.6%CVE-2022-41604High
Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges.
- 0.4%CVE-2022-23743High
Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process.
- 0.4%CVE-2007-2174High
The IOCTL handling in srescan.sys in the ZoneAlarm Spyware Removal Engine (SRE) in Check Point ZoneAlarm before 5.0.156.0 allows local users to execute arbitrary code via certain IOCTL lrp parameter addresses.
- 0.4%CVE-2018-8790High
Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM.
- 0.4%CVE-2019-8455High
A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked file.
- 0.4%CVE-2007-4216High
vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in a METHOD_NEITHER (1) IOCTL 0x8400000F or (2) IOCTL...
- 0.4%CVE-2005-2932High
Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain...
Running Zonealarm? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
TrueVector in Check Point ZoneAlarm 8.0.020.000, with vsmon.exe running, allows remote HTTP proxies to cause a denial of service (crash) and disable the HIDS module via a crafted response.
- Matched to
- Zonealarm on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 14 published vulnerabilities listed under the name Zonealarm, across 46 versions.
None of Zonealarm's vulnerabilities is on the list of flaws known to be exploited today.
Checkpoint also lists Zonealarm under more specific names, such as Zonealarm Extreme Security and Zonealarm Anti-Ransomware. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Create a Precursor Intelligence account and track Zonealarm. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.