Skip to content
OpenAdvisories
Unscored CVE-2004-2126 EUVD-2004-2118GHSA-w72h-phxf-6h8h

The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.ini, (2) firewall.ini,…

Published May 27, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.ini, (2) firewall.ini, (3) protect.ini, or (4) sigs.ini, which allows local users to modify BlackICE configuration or possibly execute arbitrary code by exploiting vulnerabilities in the .INI parsers.

References