CVE:CVE-2004-2125
CNNVD:CNNVD-200412-1105
BlackICE包含多个产品可对系统进行安全保护，包括BlackICE Agent for Server、BlackICE PC Protection、BlackICE Server Protection等。
BlackICE包含的blackd.exe存在缓冲区，本地攻击者可以利用这个漏洞提升权限。
问题存在与对packetLog的解析中，一个验证用户通过提供超长字符串作为packetLog.fileprefix参数的文件供给blackd.exe，217字符的日志前缀会由于EIP和ECX被用户提供数据覆盖而使BlackICE blackd崩溃。
solution:Upgrade iss blackice_agent_server to a higher version than 3.6eca,and avoid the version 3.6eca; Upgrade iss blackice_pc_protection to a higher version than 3.6cbd,and avoid the version 3.6cbd; Upgrade iss blackice_server_protection to a higher version than 3.6cbz,and avoid the version 3.6cbz; Upgrade iss realsecure_desktop to a higher version than 3.6eca,7.0ebg,and avoid the version 3.6eca,7.0ebg