Check Point would like to thank Chris Anastasio for discovering the issue and bringing it to the attention of Check Point.Fixed: SBACipollaSrvHost exposes WCF service to low privilege users which can be leveraged to execute arbitrary code as SYSTEM.Check Point would like to thank Jakub Palaczynski for reporting the issues.Doing this on files with limited access gains the local attacker higher privileges to the file. Fix for CVE-2019-8455: A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked file.This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client. Fix for CVE-2019-8453: Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions.New: Antivirus SDK with better protections.New: ZoneAlarm Safe Search – English version only.New: Web Secure Free Chrome extension: blocks phishing attacks and safely download documents in Chrome – English version only.New: ZoneAlarm Safe Search – Adding to French, German, Italian and Spanish versions.
This version is not supported for Windows 7.Automatic upgrades to the latest available version.Update security engine version to E86.25.A single place to manage your quarantine and security events.Improved stability and modifications to the user interface.Web Secure - Added switch to add or remove the extension.Other bug fixes and enhancements to upgrades flow.
0 kommentar(er)
