CVE-2006-1475: Low severity Microsoft Windows XP vulnerability
Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams (ADS) filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windows Firewall would have produced for a non-ADS file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1475?
CVE-2006-1475 has a medium severity due to its potential to allow Trojan horse attacks without alerts.
How do I fix CVE-2006-1475?
To mitigate CVE-2006-1475, consider upgrading to a later version of Windows that does not contain this vulnerability.
Who is affected by CVE-2006-1475?
CVE-2006-1475 primarily affects users of Microsoft Windows XP SP2.
What type of attack does CVE-2006-1475 enable?
CVE-2006-1475 enables local users to execute applications without triggering Windows Firewall alerts.
Is CVE-2006-1475 a remote vulnerability?
No, CVE-2006-1475 is a local vulnerability requiring physical access to the system.