CVE-2004-0612: The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted ses...

Security readout for executives and security teams

This CVE describes a reported bypass of ZoneAlarm Pro's Mobile Code filter when content is delivered inside an SSL encrypted session. The practical concern is false assurance: users may believe mobile code is filtered while HTTPS traffic is not inspected. The vendor disputed the report, saying the behavior follows SSL requirements. Exposure is most plausible where legacy ZoneAlarm Pro 5.0.590.015 is still deployed and relied on to filter mobile code in HTTPS sessions. The bundle lacks structured affected-product data beyond the description and references. Treat this as a legacy-control assurance issue, not an emergency, unless the product is still used in regulated or high-risk environments. Priority should be inventory, replacement planning, and avoiding reliance on unsupported filtering claims. Mitigation focus: Identify any remaining ZoneAlarm Pro 5.0.590.015 installations.; Check vendor or successor guidance before assuming a patch exists.; Do not rely on this legacy filter for HTTPS content control..

Prepared

Jun 30, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.