Description
My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test Your Firewall" feature, which allows local users to gain SYSTEM privileges.
References
- 20061121 Secunia Research: My Firewall Plus Privilege EscalationVulnerability mailing-list
- 21142 third-party-advisory
- 21228 vdb-entry
- my-firewall-privilege-escalation(30476) vdb-entry
- ADV-2006-4635 vdb-entry
- 1017267 vdb-entry
- http://secunia.com/secunia_research/2006-59/advisory