CVE-2006-3999

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-05 · updated 2026-06-16

Description

ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries because replacing pamversion.dll requires administrative privileges. However, this issue is a vulnerability because BlackICE is intended to protect against certain rogue privileged actions.

Affected products

ISS Blackice Pc Protection: 3.6cpie, 3.6cpj

References

http://securityreason.com/securityalert/1338
http://securitytracker.com/id?1016618
http://www.securityfocus.com/archive/1/441829/100/0/threaded
http://securityreason.com/securityalert/1338
http://securitytracker.com/id?1016618
http://www.securityfocus.com/archive/1/441829/100/0/threaded

Get alerted when CVE-2006-3999 or the next vulnerability affects your stack