CVE-2004-1714: Iss Blackice Pc Protection

High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days.

BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule.

Affected products

• Iss Blackice Pc Protection: version 3.6cbd only; version 3.6cbr only; version 3.6cbz only; version 3.6cca only; version 3.6ccb only; version 3.6ccc only; …
• Iss Blackice Server Protection: version 3.5cdf only; version 3.6cbz only; version 3.6cca only; version 3.6ccb only; version 3.6ccc only; version 3.6ccd only; …

Published 2004-08-11. Last modified 2026-06-16.