Description
Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a URL with hex encoded file extensions.
References
- 20041111 Zone Labs IMsecure Active Link Filter Bypass mailing-list
- imsecure-active-link-bypass(18042) vdb-entry
- 11662 vdb-entry
- http://download.zonelabs.com/bin/free/securityAlert/16.html
- 13169 third-party-advisory