CVE-2005-3560: Zonelabs Zonealarm

High severity, CVSS 7.5. EPSS: 15.5% chance of exploitation in the next 30 days.

Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs" (window.location.href) contained within JavaScript tags.

Affected products

• Zonelabs Zonealarm: version 6.0 only
• Zonelabs Zonealarm Anti-Spyware: version 6.0 only; version 6.1 only
• Zonelabs Zonealarm Antivirus: version 6.0 only
• Zonelabs Zonealarm Security Suite: version 6.0 only

Published 2005-11-16. Last modified 2026-06-16.