topic Zonealaram chrome extension security hole? in Endpoint

Zonealaram chrome extension security hole?

eminem — Tue, 20 Oct 2020 07:21:10 GMT

Zonealaram chrome extension chatchs user's download, but in the following secenario I can bypass the scan:

go to some pdf test website http://www.orimi.com/pdf-test.pdf

go to print dialog, set to "save as pdf" and then click "save"

the file is then downloaded to user's computer without scannong it

Re: Zonealaram chrome extension security hole?

PhoneBoy — Mon, 26 Oct 2020 05:34:52 GMT

This is something we're aware of and plan to fix.
Keep in mind the ZoneAlarm extension can't protect the user if they decide to:

Open an unsupported browser where the plugin won't run
Open an incognito browser (if the extension isn't enabled there)

Re: Zonealaram chrome extension security hole?

Dale_Lobb — Mon, 26 Oct 2020 16:51:04 GMT

Since other browsers beside Chrome have been supported in EndPoint for quite some time, is there any plan to support plugins with other browsers in ZoneAlarm? I do not use Chrome, as I do not like Google spying on me, but I use Firefox intensively. It would be nice to have a WebSecure plugin for Firefox.

Re: Zonealaram chrome extension security hole?

DL1 — Thu, 29 Oct 2020 06:32:48 GMT

Dale, you can use the ZoneAlarm extension with Edge. Just go to the Chrome store from Edge and install

Re: Zonealaram chrome extension security hole?

Lior_Arzi — Thu, 29 Oct 2020 06:46:09 GMT

Yes.
We are planning on adding more browsers in the future.