CVE-2006-1475: Microsoft Windows XP

Low severity, CVSS 2.1. EPSS: 1.7% chance of exploitation in the next 30 days.

Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams (ADS) filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windows Firewall would have produced for a non-ADS file.

Affected products

• Microsoft Windows XP: any version

Published 2006-03-29. Last modified 2026-06-16.