DLL Hijacking Vulnerability in Check Point ZoneAlarm
CVE-2019-8453

5.5MEDIUM

Key Information:

Vendor
Checkpoint
Vendor
CVE Published:
17 April 2019

Summary

A vulnerability exists in Check Point ZoneAlarm where some DLLs are loaded from directories with write permissions for all users. This flaw allows local attackers to replace legitimate DLL files with malicious ones, potentially resulting in Denial of Service attacks on the client.

Affected Version(s)

Check Point ZoneAlarm up to 15.4.062

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.