CVE-2005-2711: Iss Blackice Agent Server

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM.

Affected products

• Iss Blackice Agent Server: any version
• Iss Blackice Pc Protection: version 3.6 only; version 3.6cpu only
• Iss Blackice Server Protection: any version
• Iss Realsecure Desktop: version 3.6 only; version 7.0 only

Published 2005-12-31. Last modified 2026-06-16.