Vulnerability in Iss Blackice Pc Protection
CVE-2006-3840
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.
EPSS: 0.024 (83.0th percentile) — read the EPSS interpretation.
Affected products
- Iss Blackice_pc_protection — versions 3.6cpk
- Iss Blackice_server_protection — versions 3.6cpk
- Iss Proventia_a_series_xpu
- Iss Proventia_desktop — versions 8.0.675.1790, 8.0.812.1790
- Iss Proventia_g_series_xpu
- Iss Proventia_m_series_xpu
- Iss Proventia_server — versions 1.0.914.1880
- Iss Realsecure_desktop — versions 7.0epk
- Iss Realsecure_network — versions 7.0
- Iss Realsecure_server_sensor — versions 7.0
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_ISS, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_XF)