CVE-2004-2125: Buffer Overflow
Published Dec 31, 2004
·Updated
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.
Affected Software
5 affected components
iss RealSecure Desktop=7.0ebg
iss BlackICE PC Protection=3.6cbd
iss Blackice Agent Server=3.6eca
iss BlackICE Server Protection=3.6cbz
iss RealSecure Desktop=3.6eca
Event History
Dec 31, 2004
CVE Published
05:00 AM
May 27, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2125?
CVE-2004-2125 is classified as a local privilege escalation vulnerability due to a buffer overflow.
2
How do I fix CVE-2004-2125?
To fix CVE-2004-2125, ensure you update BlackICE PC Protection to version 3.6.ccb or later.
3
Who is affected by CVE-2004-2125?
CVE-2004-2125 affects local users of BlackICE PC Protection versions prior to 3.6.ccb.
4
What can attackers do with CVE-2004-2125?
Attackers can exploit CVE-2004-2125 to gain system privileges on affected systems.
5
Is my system vulnerable to CVE-2004-2125?
If you are using an affected version of BlackICE PC Protection and application protection is off, your system is vulnerable to CVE-2004-2125.