Executive Summary

Informations
Name CVE-2006-4541 First vendor Publication 2006-09-05
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score 4.6 Attack Range Local
Cvss Impact Score 6.4 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the NtOpenSection API function. NOTE: it was later reported that 3.6.cqn is also affected.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4541

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-20 Improper Input Validation

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 16

Open Source Vulnerability Database (OSVDB)

Id Description
28332 BlackICE PC Protection NtOpenSection() Function DoS

BlackICE PC Protection contains a flaw that may allow a local denial of service. The issue is triggered by a call to NtOpenSection() with a NULL value in the third argument. The arguments are direct user input and the third argument is not validated by BlackICE. The result is a system crash from an error in RapDrv.sys.

Sources (Detail)

http://secunia.com/advisories/21710
http://securityreason.com/securityalert/1512
http://www.matousec.com/info/advisories/BlackICE-Insufficient-validation-of-a...
http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php
http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in...
http://www.osvdb.org/28332
http://www.securityfocus.com/archive/1/444958/100/0/threaded
http://www.securityfocus.com/archive/1/479830/100/0/threaded
http://www.securityfocus.com/bid/19800
http://www.vupen.com/english/advisories/2006/3431
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
Date Informations
2024-11-28 23:19:38
  • Multiple Updates
2024-11-28 12:09:54
  • Multiple Updates
2021-05-04 12:04:31
  • Multiple Updates
2021-04-22 01:05:11
  • Multiple Updates
2020-05-24 01:02:43
  • Multiple Updates
2020-05-23 00:18:20
  • Multiple Updates
2018-10-18 00:19:40
  • Multiple Updates
2016-06-28 15:56:39
  • Multiple Updates
2016-04-26 15:02:10
  • Multiple Updates
2013-05-11 11:08:19
  • Multiple Updates