CVE-2004-1714 – Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun

https://notcve.org/view.php?id=CVE-2004-1714

11 Aug 2004 — BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule. • https://www.exploit-db.com/exploits/24362 • CWE-732: Incorrect Permission Assignment for Critical Resource •