A vulnerability has been identified in BlackICE PC Protection, which potentially could allow malicious people to bypass the filter protecting against Cross Site Scripting attacks.

The problem is that the filter in BlackICE PC Protection doesn't check for typical Cross Site Scripting attempts in "HEAD", "PUT", "DELETE", and "TRACE" requests.

If an attacker can find a site, which is vulnerable to Cross Site Scripting and supports one of the above mentioned request methods, it could still be possible to launch a Cross Site Scripting attack.

The vulnerability has been reported to affect BlackICE PC Protection 3.6cbd.

Solution
Be carefull when following links from untrusted sources to trusted sources.
Further details available in Customer Area

Provided and/or discovered by
Marc Ruef

Deep Links
Links available in Customer Area