ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries because replacing pamversion.dll requires administrative privileges. However, this issue is a vulnerability because BlackICE is intended to protect against certain rogue privileged actions.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2006-08-05 01:04
Updated : 2024-02-28 10:42
NVD link : CVE-2006-3999
Mitre link : CVE-2006-3999
CVE.ORG link : CVE-2006-3999
JSON object : View
Products Affected
iss
- blackice_pc_protection
CWE