CVE-2004-2713 - CVE House
Back to Database
Status published Low CVE-2004-2713

Zone Alarm Pro 1.0 through 5.1 gives full access to...

Vulnerability Description

Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissions. NOTE: this issue has been disputed by the vendor, who claims that it does not affect product functionality since the same information is also saved in a protected file

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-2713

Credits & Attribution

No credits recorded in the NVD database.

References

More from zonelabs

View All →
CVE-2007-5044
ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to...
Medium 6.9
CVE-2007-2467
ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other...
Medium 4.9
CVE-2007-2083
vsdatant.sys in Check Point Zone Labs ZoneAlarm Pro before 7.0.302.000...
Medium 6.9
CVE-2007-0351
Microsoft Windows XP and Windows Server 2003 do not properly...
Medium 6.2
CVE-2006-3540
Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000,...
Medium 4.9

Affected Vendor

Affected Software

zonealarm
Vulnerable Versions:
1.0

Timeline

Official Publish: October 6th, 2007
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.