CVE-2006-3973 My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test Your Firewall" feature, which allows local users to gain SYSTEM privileges.
HighCVSS 7.2
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test Your Firewall" feature, which allows local users to gain SYSTEM privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| my firewall plus | = 5.0_build_1119 | No fix listed |
References
- 21142 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 1017267 vdb-entry
- 20061121 Secunia Research: My Firewall Plus Privilege EscalationVulnerability mailing-list
- 21228 vdb-entry
- ADV-2006-4635 vdb-entry
- my-firewall-privilege-escalation(30476) vdb-entry