PT-2006-5334 · Ibm · Blackice Pc Protection

David Matousek · Publicado 2006-09-05 · Atualizado 2018-10-17 · CVE-2006-4541

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BlackICE PC Protection versions 3.6.cpn, 3.6.cpj, 3.6.cpiE, and possibly 3.6 and earlier BlackICE PC Protection version 3.6.cqn

Description The issue allows local users to cause a denial of service, resulting in a crash, by providing a NULL third argument to the NtOpenSection API function.

Recommendations For BlackICE PC Protection versions 3.6.cpn, 3.6.cpj, 3.6.cpiE, 3.6.cqn, and possibly 3.6 and earlier, consider avoiding the use of the NtOpenSection API function with a NULL third argument until a patch is available. As a temporary workaround, consider restricting access to the RapDrv.sys driver to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2006-4541

Produtos afetados

Blackice Pc Protection

Referências · 12

• 🔥 https://exploit-db.com/exploits/28469 · Exploit
• http://securityfocus.com/bid/19800 · Nota
• http://securityfocus.com/archive/1/444958/100/0/threaded · Nota
• http://matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php · Nota
• http://osvdb.org/28332 · Nota
• http://secunia.com/advisories/21710 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/3431 · Aviso do Fabricante
• http://matousec.com/info/advisories/plague-in-security-software-drivers.php · Nota
• http://securityreason.com/securityalert/1512 · Nota
• http://matousec.com/info/advisories/BlackICE-Insufficient-validation-of-arguments-of-NtOpenSection.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4541 · Nota de Segurança
• http://securityfocus.com/archive/1/479830/100/0/threaded · Nota