CVE-2005-2711

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-31 · updated 2026-06-16

Description

ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM.

Affected products

ISS Blackice Agent Server: all versions
ISS Blackice Pc Protection: 3.6, 3.6cpu
ISS Blackice Server Protection: all versions
ISS Realsecure Desktop: 3.6, 7.0

References

http://secunia.com/advisories/19327
http://securitytracker.com/id?1015820
http://securitytracker.com/id?1015821
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=403
http://www.osvdb.org/24096
http://www.securityfocus.com/bid/17218
http://www.vupen.com/english/advisories/2006/1090
https://exchange.xforce.ibmcloud.com/vulnerabilities/25423
http://secunia.com/advisories/19327
http://securitytracker.com/id?1015820
http://securitytracker.com/id?1015821
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=403

Get alerted when CVE-2005-2711 or the next vulnerability affects your stack