[原文]** DISPUTED ** Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissions. NOTE: this issue has been disputed by the vendor, who claims that it does not affect product functionality since the same information is also saved in a protected file.
ZoneAlarm Pro Configuration File/Directory Permission Weakness DoS
Local Access Required
Denial of Service
Loss of Availability
Zone Alarm Pro contains a flaw that may allow a local denial of service. The issue is due to Zone Alarm Pro setting the configuration file/folder permissions for %windir%\Internet Logs\* to Everyone:Full Control. This allows any local user to make changes to the Zone Alarm configuration file. While the changes to the configuration are not processed by the server, the changes to the file trigger it's built in protection to prevent running with untrusted options and causes the firewall to shut down.
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.