CVE-2004-2125

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.

Affected products

ISS Blackice Agent Server: 3.6eca
ISS Blackice Pc Protection: 3.6cbd
ISS Blackice Server Protection: 3.6cbz
ISS Realsecure Desktop: 3.6eca, 7.0ebg

References

http://archives.neohapsis.com/archives/iss/2004-q1/0157.html
http://marc.info/?l=bugtraq&m=107530966524193&w=2
http://secunia.com/advisories/10739
http://www.osvdb.org/3740
http://www.securityfocus.com/bid/9514
https://exchange.xforce.ibmcloud.com/vulnerabilities/14965
http://archives.neohapsis.com/archives/iss/2004-q1/0157.html
http://marc.info/?l=bugtraq&m=107530966524193&w=2
http://secunia.com/advisories/10739
http://www.osvdb.org/3740
http://www.securityfocus.com/bid/9514
https://exchange.xforce.ibmcloud.com/vulnerabilities/14965

Get alerted when CVE-2004-2125 or the next vulnerability affects your stack