CPE Details
Internet Security Systems BlackICE PC Protection 3.6
3.6
2008-01-02
23h51 +00:00
23h51 +00:00
2008-03-25
18h15 +00:00
18h15 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:iss:blackice_pc_protection:3.6:*:*:*:*:*:*:*
Informations
Vendor
issProduct
blackice_pc_protectionVersion
3.6Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the NtOpenSection API function. NOTE: it was later reported that 3.6.cqn is also affected. | 4.6 |
|||
| ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM. | 7.2 |
|||
| The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.ini, (2) firewall.ini, (3) protect.ini, or (4) sigs.ini, which allows local users to modify BlackICE configuration or possibly execute arbitrary code by exploiting vulnerabilities in the .INI parsers. | 4.6 |
