CVE-2005-3560 in the critical feed json
Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 th…
published 2005-11-16 20 y ago modified 2026-06-16 4 mo ago also EUVD-2005-3559
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 15.5%
- EPSS 15.5% chance of exploitation in 30 days, percentile 96%
- public exploits
- 1
- Exploit-DB
Summary
Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs" (window.location.href) contained within JavaScript tags.
Timeline
- First public exploit (EDB-26479)
- Published
Exploit prediction
15.53% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-26479 Zone Labs Zone Alarm 6.0 - Advance Program Control Bypass local, 2005-11-07
- securityfocus.com http://www.securityfocus.com/bid/15347 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
securityfocus.com
/bid/15347
vdb-entry, exploit
-
secunia.com
/advisories/17450
third-party-advisory, vendor-advisory
-
osvdb.org
/20677
vdb-entry
-
securityreason.com
/securityalert/155
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/22971
vdb-entry
-
securityfocus.com
/archive/1/415968
mailing-list
Sources
- CVE List CVE-2005-3560
- NVD CVE-2005-3560
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.