| Package | Affected versions | Patched versions |
|---|---|---|
| blackice pc protection | = 3.6cpk | |
| blackice server protection | = 3.6cpk | |
| proventia desktop | = 8.0.675.1790= 8.0.812.1790 | |
| realsecure desktop | = 7.0epk | |
| realsecure network | = 7.0 | |
| realsecure server sensor | = 7.0 |
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free