CVE-2006-3540

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-07-13 · updated 2026-06-16

Description

Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, and possibly other versions do not properly validate RegSaveKey, RegRestoreKey, and RegDeleteKey function calls, which allows local users to cause a denial of service (system crash) via a certain combination of these function calls with an HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VETFDDNT\Enum argument.

Affected products

Zonelabs Zonealarm Security Suite: 6.1.737.000, 6.5.722.000

References

http://www.matousec.com/info/advisories/ZoneAlarm-Insufficient-protection-of-registry-key-VETFDDNT-Enum.php
http://www.securityfocus.com/archive/1/438970/100/0/threaded
http://www.securityfocus.com/bid/18789
https://exchange.xforce.ibmcloud.com/vulnerabilities/27584
http://www.matousec.com/info/advisories/ZoneAlarm-Insufficient-protection-of-registry-key-VETFDDNT-Enum.php
http://www.securityfocus.com/archive/1/438970/100/0/threaded
http://www.securityfocus.com/bid/18789
https://exchange.xforce.ibmcloud.com/vulnerabilities/27584

Get alerted when CVE-2006-3540 or the next vulnerability affects your stack