CVE-2006-4541

Published: Sep 5, 2006Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the NtOpenSection API function. NOTE: it was later reported that 3.6.cqn is also affected.

Affected (4)

Products: Iss: Blackice Pc Protection

1 product

Blackice Pc Protection

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Iss Blackice Pc Protection	Up to 3.6
Iss Blackice Pc Protection	Version 3.6cpie
Iss Blackice Pc Protection	Version 3.6cpj
Iss Blackice Pc Protection	Version 3.6cpn

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (20)

http://secunia.com/advisories/21710

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1512

Source: cve@mitre.org

http://www.matousec.com/info/advisories/BlackICE-Insufficient-validation-of-arguments-of-NtOpenSection.php

Source: cve@mitre.org

http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php

Source: cve@mitre.org

http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php

Source: cve@mitre.org

http://www.osvdb.org/28332

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/444958/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/479830/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19800

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3431

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21710

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/1512

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.matousec.com/info/advisories/BlackICE-Insufficient-validation-of-arguments-of-NtOpenSection.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/28332

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/444958/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/479830/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19800

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3431

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.