CVE-2002-0237: Iss Blackice Agent

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a flood of large ICMP ping packets.

Affected products

• Iss Blackice Agent: version 3.0 only; version 3.1 only
• Iss Blackice Defender: version 2.9 only; version 2.9cap only; version 2.9caq only
• Iss Realsecure Server Sensor: version 6.0.1 only; version 6.5 only

Published 2002-05-29. Last modified 2026-06-16.