CVE-2005-2711 - CVE House
Back to Database
Status published High CVE-2005-2711

ISS BlackIce 3.6, as used in multiple products including BlackICE...

Vulnerability Description

ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2711

Credits & Attribution

No credits recorded in the NVD database.

References

More from iss

View All →
CVE-2014-7725
The Rally Albania Live 2014 (aka com.wRallyAlbaniaLIVE2014) application 0.11 for...
Medium 5.4
CVE-2007-2690
Multiple IBM ISS Proventia Series products, including the A, G,...
High 7.8
CVE-2006-7129
ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly...
Low 2.1
CVE-2006-4541
RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly...
Medium 4.6
CVE-2006-3999
ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions...
Medium 4.6

Affected Vendor

Affected Software

blackice agent server, blackice pc protection, blackice server protection, realsecure desktop
Vulnerable Versions:
3.6, 3.6cpu, 7.0

Timeline

Official Publish: March 24th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.