Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISS BlackICE PC保护blackd.exe程序本地缓冲区溢出漏洞
Vulnerability Description
BlackICE包含多个产品可对系统进行安全保护，包括BlackICE Agent for Server、BlackICE PC Protection、BlackICE Server Protection等。 BlackICE包含的blackd.exe存在缓冲区，本地攻击者可以利用这个漏洞提升权限。 问题存在与对packetLog的解析中，一个验证用户通过提供超长字符串作为packetLog.fileprefix参数的文件供给blackd.exe，217字符的日志前缀会由于EIP和ECX被用户提供数据覆盖
CVSS Information
N/A
Vulnerability Type
N/A