Read the docs
TI-2007-00341 Aliases CVE-2007-0351GHSA-prg6-r6p4-g6xc

Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which…

Priority LOW 27Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain the privileges of a previous system user, possibly related to user profile unload failure. NOTE: it is not clear whether this is an issue in Windows itself, or an interaction with another product. The issue might involve ZoneAlarm not being able to terminate processes when it cannot prompt the user.

Why it matters now

EPSS 0.00295 22nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*r2Running onMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:a:zonelabs:zonealarm:*:*:*:*:*:*:*:*all versionsVulnerableZonelabs
  • cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:* Versions r2 Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:a:zonelabs:zonealarm:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Zonelabs

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-0351
  2. 2026-10-03 Alias added: GHSA-prg6-r6p4-g6xc

References

—

  • TI-2004-00278 Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs… CVSS 2.0HIGH 10.0
  • TI-2005-01601 Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT… CVSS 2.0HIGH 10.0
  • TI-2005-03381 Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm… CVSS 2.0HIGH 7.5
  • TI-2003-01209 The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm… CVSS 2.0HIGH 10.0
  • TI-2000-00339 ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which… CVSS 2.0HIGH 7.5
  • TI-2002-01916 ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly… CVSS 2.0HIGH 7.5
See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences