CVE-2004-0039: Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firew...

Security readout for executives and security teams

This old Check Point firewall flaw could let a remote attacker run code on affected firewall components handling HTTP traffic. That makes it business-critical for any organization still operating these legacy versions, especially if they inspect internet-facing web traffic. Exposure is limited to legacy Check Point Firewall-1 NG-AI R55/R54 and Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3, where those components process untrusted HTTP traffic. Treat as urgent only if these legacy Check Point components remain in service. Remote code execution on a firewall can undermine a core security control and requires rapid inventory-driven action. Mitigation focus: Inventory legacy Check Point Firewall-1 and HTTP Security Server deployments.; Review Check Point, CERT/CC, and US-CERT guidance for vendor remediation.; Prioritize replacement or isolation of unsupported legacy firewall platforms..

Prepared

Jun 30, 2026, 07:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.