Lucene search

MitreCVE-2006-4541

HistorySep 05, 2006 - 11:04 p.m.

CVE-2006-4541

2006-09-0523:04:00

CWE-20

mitre

web.nvd.nist.gov

cve-2006-4541

rapdrv.sys

blackice pc protection

denial of service

ntopensection api

security vulnerability

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

High

EPSS

Percentile

9.7%

JSON

RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the NtOpenSection API function. NOTE: it was later reported that 3.6.cqn is also affected.

Affected configurations

Nvd

Node

issblackice_pc_protectionRange≤3.6

issblackice_pc_protectionMatch3.6cpie

issblackice_pc_protectionMatch3.6cpj

issblackice_pc_protectionMatch3.6cpn

VendorProductVersionCPE
issblackice_pc_protection*cpe:2.3:a:iss:blackice_pc_protection:*:*:*:*:*:*:*:*
issblackice_pc_protection3.6cpiecpe:2.3:a:iss:blackice_pc_protection:3.6cpie:*:*:*:*:*:*:*
issblackice_pc_protection3.6cpjcpe:2.3:a:iss:blackice_pc_protection:3.6cpj:*:*:*:*:*:*:*
issblackice_pc_protection3.6cpncpe:2.3:a:iss:blackice_pc_protection:3.6cpn:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
iss	blackice_pc_protection	*	cpe:2.3:a:iss:blackice_pc_protection::::::::
iss	blackice_pc_protection	3.6cpie	cpe:2.3:a:iss:blackice_pc_protection:3.6cpie:::::::*
iss	blackice_pc_protection	3.6cpj	cpe:2.3:a:iss:blackice_pc_protection:3.6cpj:::::::*
iss	blackice_pc_protection	3.6cpn	cpe:2.3:a:iss:blackice_pc_protection:3.6cpn:::::::*

References

secunia.com/advisories/21710

securityreason.com/securityalert/1512

www.matousec.com/info/advisories/BlackICE-Insufficient-validation-of-arguments-of-NtOpenSection.php

www.matousec.com/info/advisories/plague-in-security-software-drivers.php

www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php

www.osvdb.org/28332

www.securityfocus.com/archive/1/444958/100/0/threaded

www.securityfocus.com/archive/1/479830/100/0/threaded

www.securityfocus.com/bid/19800

www.vupen.com/english/advisories/2006/3431

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

High

EPSS

Percentile

9.7%

JSON

Related for CVE-2006-4541