CVE-2004-1714

VendorissProductblackice server protection, blackice pc protectionDiscoveredAug 11, 2004UpdatedApr 16, 2026

BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule.

View graph Watch Export

CVSS v3.1

7.1 HIGH

EPSS

0.85%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

ScopeUNCHANGED

ConfidentialityNONE

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Connections

3 relationships

CWE-732

source

Timeline

disclosure → media coverage

Aug 11, 2004

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026