Secunia

eEye has discovered a vulnerability in ZoneAlarm and Integrity client, allowing users to escalate their privileges and potentially also allowing malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the SMTP processing system when handling outgoing email messages. This can be exploited to cause a buffer overflow by sending an email with an overly long value in a "RCPT TO:" header.

Successful exploitation allows execution of arbitrary code with SYSTEM privileges and can be remotely exploited without any user action if the SMTP service is running on a protected system.

The vulnerability has been reported to affect version 4.x. Prior versions are not vulnerable.

NOTE: According to the vendor, only a small percentage of users are affected, since this is an untypical setup as servers shouldn't be protected with the client security products.

Solution
Update to the following versions:
Further details available in Customer Area

Provided and/or discovered by
Riley Hassell, eEye Digital Security.

Changelog
Further details available in Customer Area

Original Advisory
Zone Labs:
http://download.zonelabs.com/bin/free/securityAlert/8.html

eEye Digital Security:
http://www.eeye.com/html/Research/Advisories/AD20040219.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area