CVE-2006-3973

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-11-22 · updated 2026-06-16

Description

My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test Your Firewall" feature, which allows local users to gain SYSTEM privileges.

Affected products

My Firewall Plus: 5.0_build_1119

References

http://secunia.com/advisories/21142
http://secunia.com/secunia_research/2006-59/advisory
http://securitytracker.com/id?1017267
http://www.securityfocus.com/archive/1/452233/100/0/threaded
http://www.securityfocus.com/bid/21228
http://www.vupen.com/english/advisories/2006/4635
https://exchange.xforce.ibmcloud.com/vulnerabilities/30476
http://secunia.com/advisories/21142
http://secunia.com/secunia_research/2006-59/advisory
http://securitytracker.com/id?1017267
http://www.securityfocus.com/archive/1/452233/100/0/threaded
http://www.securityfocus.com/bid/21228

Get alerted when CVE-2006-3973 or the next vulnerability affects your stack