CVE-2006-4541

概要

参考情報

• secunia.com/advisories/21710 · Vendor Advisory
• securityreason.com/securityalert/1512
• matousec.com/info/advisories/BlackICE-Insufficient-validation-of-arguments-of-NtOpenSection.php
• matousec.com/info/advisories/plague-in-security-software-drivers.php
• matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
• osvdb.org/28332
• securityfocus.com/archive/1/444958/100/0/threaded
• securityfocus.com/archive/1/479830/100/0/threaded
• securityfocus.com/bid/19800
• vupen.com/english/advisories/2006/3431 · Vendor Advisory

blackice pc protection のその他の脆弱性

• CVE-2006-7129低 2.1ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the Z…
• CVE-2006-3999中 4.6ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll Blac…
• CVE-2006-3840中 5.0The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Se…
• CVE-2005-2711高 7.2ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop…
• CVE-2004-2126中 4.6The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.ini, (2) firewall.ini, …