Zone Alarm Ad-Blocking Instability Vulnerabili

[Mobo]

Overview: ZoneAlarm® Security Suite and ZoneAlarm® Pro have been updated to address a vulnerability in their ad-blocking functions. Specially crafted JavaScript may cause a user's system to become unstable or lock


Specially crafted JavaScript placed on a malicious website may cause the software to become unstable and/or lock the system.

This issue presents no other risks to the computer user

Affected Products:

ZoneAlarm Security Suite, ZoneAlarm Pro
Unaffected Products:

No other Zone Labs products are affected by this issue
Description: ZoneAlarm Security Suite and ZoneAlarm Pro provide features to block specific types of advertising from websites. However, using specially crafted JavaScript, a malicious webpage could cause the software or system to lock. This vulnerability requires two specific prerequisites:

Ad-blocking must be enabled
The user must visit a website with malicious Java Script This vulnerability has been resolved in version 5.5.062 of affected Zone Labs products. Version 5.5.062 was released on November 8, 2004.

Users configured to receive automatic product updates will receive this update automatically. Users configured to receive manual updates should use the Check For Update option – see the Recommended Actions section below.

Recommended Actions: ZoneAlarm Security Suite and ZoneAlarm Pro users will receive the update through a product update.

Users with automatic updates:
You receive the update automatically. No further action is required.

Users with manual updates:
To manually update your Zone Labs software:

Select Overview | Preferences.
In the Check For Update section, click Check For Update. If neccesary, follow the instructions to update your software. ZoneAlarm Security Suite and ZoneAlarm Pro versions 5.5.062 and newer are not impacted by this issue.

Related Resources:

Zone Labs Security Response Center:
http://www.zonelabs.com/security