CVE-2004-2125 Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file...
MediumCVSS 4.6
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iss blackice agent server | = 3.6eca | No fix listed |
| iss blackice pc protection | = 3.6cbd | No fix listed |
| iss blackice server protection | = 3.6cbz | No fix listed |
| iss realsecure desktop | = 3.6eca | No fix listed |
| iss realsecure desktop | = 7.0ebg | No fix listed |
References
- [ISSForum] 20040128 Third party BlackICE advisory mailing-list
- 20040128 SRT2004-01-17-0227 - BlackICE allows local users to become SYSTEM mailing-list
- 10739 third-party-advisory
- 3740 vdb-entry
- 9514 vdb-entry
- blackice-blackdexe-bo(14965) vdb-entry