PT-2004-1463

CVE-2004-0309

·

تاريخ النشر

2004-09-01

·

تاريخ التحديث

2017-10-10

الوصف من

CVSS 2.0
10
عالية
المقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions ZoneAlarm versions prior to 4.5.538.001 ZoneLabs Integrity client versions prior to 4.0.146.046 ZoneLabs Integrity client 4.5 versions prior to 4.5.085
Description The issue is a stack-based buffer overflow in the SMTP service support in vsmon.exe. This allows remote attackers to execute arbitrary code via a long RCPT TO argument.
Recommendations For ZoneAlarm versions prior to 4.5.538.001, update to version 4.5.538.001 or later. For ZoneLabs Integrity client versions prior to 4.0.146.046, update to version 4.0.146.046 or later. For ZoneLabs Integrity client 4.5 versions prior to 4.5.085, update to version 4.5.085 or later.
قابلية الاستغلال
إصلاح
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾