CVE-2006-3973

high

Description

My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test Your Firewall" feature, which allows local users to gain SYSTEM privileges.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/30476

http://www.vupen.com/english/advisories/2006/4635

http://www.securityfocus.com/bid/21228

http://www.securityfocus.com/archive/1/452233/100/0/threaded

http://securitytracker.com/id?1017267

http://secunia.com/secunia_research/2006-59/advisory

http://secunia.com/advisories/21142

Details

Source: Mitre, NVD

Published: 2006-11-22

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H