Zone Alarm products with Advance Program Control or OS Firewall Technology enabled, detects and blocks almost all APIs which are commonly used by malicious programs to send data via http by piggybacking over other trusted programs. However, it is still possible for a malicious programs to make outbound connections to the evil site by piggybacking over trusted Internet browser using “HTML Modal Dialog” in conjunction with simple JavaScript. POC code provided.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41394/zone.labs-fw.txt
Source: https://packetstormsecurity.com/files/41394/zone.labs-fw.txt.html