CVE-2004-2125: Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with applic...

Security readout for executives and security teams

CVE-2004-2125 affects old BlackICE PC Protection installations. A local user could abuse a configuration-file handling flaw to make the BlackICE service run code with SYSTEM privileges. This is not a remote internet attack based on the provided sources, but it can turn limited local access into full Windows control. Exposure is likely limited to legacy Windows endpoints still running BlackICE PC Protection before 3.6.ccb, especially where application protection is disabled. Modern environments are unlikely to have this product unless old endpoint builds, lab systems, or inherited assets remain unmanaged. Prioritize this where legacy BlackICE is still present on business systems. The issue is old and local-only from the provided evidence, but successful exploitation gives SYSTEM-level control, so exposed hosts should be upgraded, retired, or tightly controlled. Mitigation focus: Inventory endpoints for BlackICE PC Protection and blackd.exe.; Upgrade affected installations to 3.6.ccb or later if still supported.; Enable application protection where vendor guidance supports it..

Prepared

Jun 29, 2026, 20:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.