External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.