zonealarm vulnerabilty 'wont be fixed'

[kronas]

zonelabs the makers of the popular free software firewall are refusing to fix a vulnerabilty in its zonealarm firewall by saying 'its a problem with windows not the program itself'

using the shell32.dll found in windows a malicious hacker would have to load a trojan on the victims pc and lure the firewall in to accepting the command using the windows shell32.dll file

also a poster on the bugtraq network has claimed the $39.95 version of zonealarm has better protection as you can control anything that acesses the internet

zonelabs has said that it is not a serious flaw it would require a skilled hacker in order to execute such action rather then your average 'script kiddie'

http://www.extremetech.com/article2/...1167027,00.asp

[El Diablo]

Originally posted by kronas

zonelabs has said that it is not a serious flaw it would require a skilled hacker in order to execute such action rather then your average 'script kiddie'

Hahaha... muppets!
... security wouldn't exist without paranoia

From http://www.extremetech.com/article2...,1167027,00.asp
it would require the hacker equivalent of "brain surgery" to exploit.

It's all a marketing ploy... pay top dollar for our full product and get all the benefits!!

[darkangel]

not the first time zone alarm has had serious security flaws, never found zone alarm to work 100% and have never seen it work at all without true vector errors

[hobbie]

nods in agreement with darkangel --the true vector engine caused loads of probs for me. I now have Sygate firewall, which is free, and has passed every test at sites like pcpitstop etc

[darkangel]

Originally posted by hobbie
nods in agreement with darkangel --the true vector engine caused loads of probs for me. I now have Sygate firewall, which is free, and has passed every test at sites like pcpitstop etc

use sygate pro myself not caused me any problems yet i've tried them all so far and sygate is the only 1 i'd recommend

[Martin]

There's always something someone can exploit No wonder us mere users get paranoid!!

[kronas]

update

zonelabs will be releasing a patch to fix the loophole in the next 2 weeks they retracted there earlier refusal

http://www.extremetech.com/article2/...1179181,00.asp