blackice pc protection vulnerabilities and exploits

(subscribe to this query)

4.6

CVSSv2

RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and previous versions, allows local users to cause a denial of service (crash) via a NULL third argument to the NtOpenSection API function. NOTE: it was later reported that 3.6.cqn is also affected.

Iss Blackice Pc Protection 3.6cpn Iss Blackice Pc Protection Iss Blackice Pc Protection 3.6cpie Iss Blackice Pc Protection 3.6cpj

1 EDB exploit

2.1

CVSSv2

BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying f...

1 EDB exploit

4.6

CVSSv2

ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross priv...

Iss Blackice Pc Protection 3.6cpie Iss Blackice Pc Protection 3.6cpj

2.1

CVSSv2

ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files.

Iss Blackice Pc Protection 3.6cpj Iss Blackice Pc Protection 3.6cpu

1 EDB exploit

7.2

CVSSv2

ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection"...

Iss Realsecure Desktop 3.6 Iss Realsecure Desktop 7.0 Iss Blackice Agent Server Iss Blackice Pc Protection 3.6 Iss Blackice Pc Protection 3.6cpu Iss Blackice Server Protection

4.6

CVSSv2

The upgrade for BlackICE PC Protection 3.6 and previous versions sets insecure permissions for .INI files such as (1) blackice.ini, (2) firewall.ini, (3) protect.ini, or (4) sigs.ini, which allows local users to modify BlackICE configuration or possibly execute arbitrary code by ...

Iss Blackice Pc Protection

5

CVSSv2

A vulnerability was found in ISS BlackICE PC Protection. It has been declared as problematic. Affected by this vulnerability is the component Update Handler which allows cleartext transmission of data. NOTE: This vulnerability only affects products that are no longer supported by...

Ibm Iss Blackice Pc Protection -

7.5

CVSSv2

A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remote...

Ibm Iss Blackice Pc Protection -

4.3

CVSSv2

A vulnerability was found in ISS BlackICE PC Protection. It has been rated as problematic. Affected by this issue is the Update Handler. The manipulation with an unknown input leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to th...

Ibm Iss Blackice Pc Protection -

4.6

CVSSv2

Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions prior to 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.

Iss Blackice Server Protection 3.6cbz Iss Realsecure Desktop 3.6eca Iss Blackice Agent Server 3.6eca Iss Blackice Pc Protection 3.6cbd Iss Realsecure Desktop 7.0ebg

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook