CVE-2006-1475

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-03-29 · updated 2026-06-16

Description

Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams (ADS) filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windows Firewall would have produced for a non-ADS file.

Affected products

Microsoft Windows XP Service Pack 3: all versions

References

http://www.securityfocus.com/archive/1/428970/100/0/threaded
http://www.securityfocus.com/archive/1/429111/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/25597
http://www.securityfocus.com/archive/1/428970/100/0/threaded
http://www.securityfocus.com/archive/1/429111/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/25597

Get alerted when CVE-2006-1475 or the next vulnerability affects your stack