Vulnerability in Microsoft Windows Xp

CVE-2004-2176

The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls.

EPSS: 0.028 (85.3th percentile) — read the EPSS interpretation.

Affected products

References