Description
ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM.
References
- 17218 vdb-entry
- 1015820 vdb-entry
- blackice-appprotection-privilege-escalation(25423) vdb-entry
- 24096 vdb-entry
- ADV-2006-1090 vdb-entry
- 20060323 ISS Multiple Products Local Privilege Escalation Vulnerability third-party-advisory
- 1015821 vdb-entry
- 19327 third-party-advisory