CVE-2006-7129
CVE-2006-7129 is a low-severity vulnerability in Iss Blackice Pc Protection with a CVSS 2.0 base score of 2.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Low (CVSS 2.0 base score 2.1)
- EPSS exploit prediction: 1% (51st percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Iss Blackice Pc Protection
- Published:
- Last modified:
Description
ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files.
Frequently asked questions
- What is CVE-2006-7129?
- ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files.
- How severe is CVE-2006-7129?
- CVE-2006-7129 has a CVSS 2.0 base score of 2.1, rated low severity.
- Is CVE-2006-7129 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (51st percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-7129?
- CVE-2006-7129 primarily affects Iss Blackice Pc Protection. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2006-7129?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2006-7129 published?
- CVE-2006-7129 was published on 2007-03-06 and last updated on 2026-06-16.
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0298.html
- http://securityreason.com/securityalert/2361
- http://www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php
- http://www.osvdb.org/30901
- http://www.securityfocus.com/archive/1/448763/100/0/threaded
- http://www.securityfocus.com/bid/20546
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29575
Affected products (2)
- cpe:2.3:a:iss:blackice_pc_protection:3.6cpj:*:*:*:*:*:*:*
- cpe:2.3:a:iss:blackice_pc_protection:3.6cpu:*:*:*:*:*:*:*
More vulnerabilities in Iss Blackice Pc Protection
- CVE-2004-0362 — High (CVSS 7.5): Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component,…
- CVE-2004-0193 — High (CVSS 7.5): Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network…
- CVE-2005-2711 — High (CVSS 7.2): ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server,…
- CVE-2004-1714 — High (CVSS 7.1): BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4)…
- CVE-2006-3840 — Medium (CVSS 5.0): The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including…
- CVE-2006-4541 — Medium (CVSS 4.6): RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a…