7.2

CVE-2005-2711

ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Iss ≫ Blackice Pc Protection Version3.6
Iss ≫ Blackice Pc Protection Version3.6cpu
Iss ≫ Realsecure Desktop Version3.6
Iss ≫ Realsecure Desktop Version7.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.284
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/19327
http://securitytracker.com/id?1015820
http://securitytracker.com/id?1015821
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=403
Vendor Advisory
http://www.osvdb.org/24096
http://www.securityfocus.com/bid/17218
http://www.vupen.com/english/advisories/2006/1090
https://exchange.xforce.ibmcloud.com/vulnerabilities/25423