Login Request a demo
Unscored severity · published Sep 5, 2006
CVE-2006-4541
RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the…
–
CVSS
0.7%
EPSS
No
On KEV
Description
RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the NtOpenSection API function. NOTE: it was later reported that 3.6.cqn is also affected.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BP
Blackice PC Protection · Iss
through 3.6; 3.6cpie; 3.6cpj; 3.6cpn · source: NVD
Affected product
BP
Blackice PC Protection
Iss
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4541
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4541
Vendor Advisory
http://secunia.com/advisories/21710
securityreason.com
http://securityreason.com/securityalert/1512
www.matousec.com
http://www.matousec.com/info/advisories/BlackICE-Insufficient-validation-of-arguments-of-NtOpenSection.php
www.matousec.com
http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php
www.matousec.com
http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
www.osvdb.org
http://www.osvdb.org/28332
More from Blackice PC Protection
7.1
CVE-2004-1714
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows…
–
CVE-2006-7129
ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the…
–
CVE-2006-3999
ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users…
–
CVE-2006-3840
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and…
–
CVE-2005-2711
ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges…