VulnerabilityModified
CVE-2004-2125
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.
MEDIUM 4.6EPSS 0.42%
Does this matter?
Lower severity and a low EPSS score (0.42%). Track it; it rarely justifies an emergency change on its own.
Description
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 0.42% probability · 35th percentile
- CISA KEV
- Not listed
- Affected
- iss/blackice agent server · iss/blackice pc protection · iss/blackice server protection · iss/realsecure desktop
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/iss/2004-q1/0157.html
- http://marc.info/?l=bugtraq&m=107530966524193&w=2
- http://secunia.com/advisories/10739
- http://www.osvdb.org/3740
- http://www.securityfocus.com/bid/9514
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14965
- http://archives.neohapsis.com/archives/iss/2004-q1/0157.html
- http://marc.info/?l=bugtraq&m=107530966524193&w=2
- http://secunia.com/advisories/10739
- http://www.osvdb.org/3740
- http://www.securityfocus.com/bid/9514
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14965
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.