CVE-2006-3973

My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test Your Firewall" feature, which allows local users to gain SYSTEM privileges.

Score

CVSS 2.0 7.2 High

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2006-11-22

Last modified

2024-08-07

Affected products

• My Firewall Plus (My Firewall Plus)

References

• http://secunia.com/advisories/21142
• http://secunia.com/secunia_research/2006-59/advisory
• http://securitytracker.com/id?1017267
• http://www.securityfocus.com/archive/1/452233/100/0/threaded
• http://www.securityfocus.com/bid/21228
• http://www.vupen.com/english/advisories/2006/4635
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30476