Internet Security Systems 3.6 - 'ZWDeleteFile()' Arbitrary File Deletion

                							

                source: http://www.securityfocus.com/bid/20546/info

Internet Security Systems (ISS) BlackICE PC Protection is prone to a file-deletion vulnerability.

An attacker can exploit this issue to delete arbitrary files within the context of the affected application. This could lead to other attacks. 

Versions 3.6.cpu, 3.6.cpj are vulnerable to this issue; other versions may also be affected.

https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/28817.zip