← Database

CVE-2006-1476

LOW CVSS: 2.6 Published: 2006-03-29 Modified: 2026-06-16

Description

Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename is ".exe" (with no characters before the "."), which might allow local user-assisted users to trick a user into unblocking a Trojan horse program, as demonstrated by a malicious ".exe" program in a folder named "Internet Explorer," which triggers a question about whether to unblock the "Internet Explorer" program.

Affected Platforms

Microsoft Windows Xp

Weakness Type

NVD-CWE-Other

References