Zone Alarm Vulnerability

"The extremely popular firewall, ZoneAlarm, has been dealt a nasty blow with a "highly critical" security hole that allows system access to remote users - i.e. the worst possible situation. The hole affects the most recent version of ZoneAlarm - version 4 - and users with the software's update facility turned on were this morning warned to upgrade and asked to download a run a 4.8MB patching file. The vulnerability itself is an unchecked buffer in the fundamental e-mail protocol SMTP. ZoneAlarm's creators Zone Labs warned that sufficiently exploited, "a skilled attacker could cause the firewall to stop processing traffic, execute arbitrary code, or elevate malicious code’s privileges".

UPDATE: A FREE WORK AROUND : You can directly download the latest FULL installation of your ZoneLab version and use its UPGRADE function to update your previously registered version. It will preserve your previous registration info and configurations. It worked for me Here are the respective links over at MajorGeeks :
ZoneAlarm Free 4.5.538.001 <http://www.majorgeeks.com/download388.html>
ZoneAlarm Pro 4.5.538.001 <http://www.majorgeeks.com/download2671.html>
ZoneAlarm Plus 4.5.538.001 <http://www.majorgeeks.com/download744.html>

The article on SNP found here:

http://www.securitynewsportal.com/c...?database=JanDD.db&command=viewone&id=79&op=t

 

Same update, but more importantly, a very good reason to get it. Also addresses the issue of updates without subscriptions.