CPE Details
Internet Security Systems BlackICE PC Protection 3.6cpj
3.6cpj
2007-08-23
19h16 +00:00
19h16 +00:00
2008-03-25
18h15 +00:00
18h15 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:iss:blackice_pc_protection:3.6cpj:*:*:*:*:*:*:*
Informations
Vendor
issProduct
blackice_pc_protectionVersion
3.6cpjRelated CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files. | 2.1 |
|||
| RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the NtOpenSection API function. NOTE: it was later reported that 3.6.cqn is also affected. | 4.6 |
|||
| ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries because replacing pamversion.dll requires administrative privileges. However, this issue is a vulnerability because BlackICE is intended to protect against certain rogue privileged actions. | 4.6 |
