CVE-2004-2713: Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which a...

Security readout for executives and security teams

This old ZoneAlarm Pro issue concerns weak Windows file permissions on the Internet Logs folder. A local user might alter those files or permissions and cause a denial of service. The vendor disputed the practical impact, saying the same information is stored in a protected file. Exposure is likely limited to legacy Windows systems still running ZoneAlarm Pro 1.0 through 5.1 with local user access. Modern environments are unlikely to be affected unless old endpoint images or unsupported software remain in use. Treat this as a low-priority legacy hygiene item unless affected software is found on business-critical Windows systems. The main value is removing unsupported endpoint security software and confirming local-user controls, not emergency response. Mitigation focus: Inventory endpoints for ZoneAlarm Pro 1.0 through 5.1.; Retire or upgrade unsupported ZoneAlarm Pro installations where found.; Check Check Point or Zone Labs guidance before changing product file permissions..

Prepared

Jun 29, 2026, 02:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.