description: Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client.
problem types: CWE-114
affected:
{
product: Check Point ZoneAlarm
vendor: n/a
versions:
status: affected, version: up to 15.4.062
}