CVE-2004-2125

Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-08-08

Affected products

• Blackice Agent Server (Iss)
• Blackice Pc Protection (Iss)
• Blackice Server Protection (Iss)
• Realsecure Desktop (Iss)

References

• http://archives.neohapsis.com/archives/iss/2004-q1/0157.html
• http://marc.info/?l=bugtraq&m=107530966524193&w=2
• http://secunia.com/advisories/10739
• http://www.osvdb.org/3740
• http://www.securityfocus.com/bid/9514
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14965