CVEvulnerability

CVE-2006-3999

4.6 MEDIUM Published 2006-08-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-08-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries because replacing pamversion.dll requires administrative privileges. However, this issue is a vulnerability because BlackICE is intended to protect against certain rogue privileged actions.

Affected configurations

• iss blackice pc protection 3.6cpie • iss blackice pc protection 3.6cpj

References