Exploit Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun

[Exploiter]

EDB-ID

24362

Проверка EDB

1. Пройдено

Автор

PAUL CRAIG

Тип уязвимости

DOS

Платформа

WINDOWS

CVE

cve-2004-1714

Дата публикации

2004-08-11

Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun

source: https://www.securityfocus.com/bid/10915/info

It is reported that BlackICE PC Protection is prone to a local buffer overrun when handling excessive input in certain configuration directives parsed from the firewall.ini file included with the software.

It is reported that when the system is restarted, and the affected software reads the malicious firewall.ini file both the blackice.exe and blackd.exe executables will crash.

REJECT, 138, default, 1999-07-22 20:26:53, AAAAAAAAAAAAAAAAA.... , 2000,
unknown

(Aprox 1000 A's)