CVE-2001-0682

MEDIUM

ZoneAlarm and ZoneAlarm Pro - Denial of Service via Mutex Initialization

Title source: llm
STIX 2.1

Description

ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which prevents ZoneAlarm from starting.

References (2)

Core 2
Core References
Mailing List mailing-list x_refsource_ntbugtraq
http://marc.info/?l=ntbugtraq&m=97818917222992&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/5821

Scores

CVSS v3 5.5
EPSS 0.0021
EPSS Percentile 10.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-667
Status published
Products (2)
checkpoint/zonealarm_pro 2.6
zonelabs/zonealarm
Published Aug 29, 2001
Tracked Since Feb 18, 2026