CVE-2004-2125
Last modified
CVE-2004-2125 is a vulnerability of currently unknown severity. Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.. EPSS estimates a 0.42% chance of exploitation in the next 30 days.
Description
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Iss | Blackice Agent Server | 3.6eca |
| Iss | Blackice Pc Protection | 3.6cbd |
| Iss | Blackice Server Protection | 3.6cbz |
| Iss | Realsecure Desktop | 3.6eca |
| Iss | Realsecure Desktop | 7.0ebg |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-2125?
How severe is CVE-2004-2125?
How do I fix CVE-2004-2125?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2004
- CVE-2004-2119Cross-site scripting (XSS) vulnerability in Tiny Server 1.1 …
- CVE-2004-2120Reptile Web Server allows remote attackers to cause a denial…
- CVE-2004-2121Multiple directory traversal vulnerabilities in Borland Web …
- CVE-2004-2122Cross-site scripting (XSS) vulnerability in intraforum_db.cg…
- CVE-2004-2123Multiple cross-site scripting (XSS) vulnerabilities in Nextp…
- CVE-2004-2124The register_globals simulation capability in Gallery 1.3.1 …
- CVE-2004-2126The upgrade for BlackICE PC Protection 3.6 and earlier sets …
- CVE-2004-2127Directory traversal vulnerability in Web Blog 1.1 allows rem…
- CVE-2004-2128Cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.…
- CVE-2004-2129SurfNOW 2.2 allows remote attackers to cause a denial of ser…
- CVE-2004-2130Multiple cross-site scripting (XSS) vulnerabilities in privm…
- CVE-2004-2131Stack-based buffer overflow in ontape for IBM Informix Dynam…
Are you affected by CVE-2004-2125?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST