PT-2007-3494 · Mcafee · Mcafee Virusscan Enterprise

Publicado 2007-04-19 · Atualizado 2017-07-29 · CVE-2007-2152

Positive Technologies (AI Summary)

CVSS v2.0

7.9

Alta

Vetor base

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions prior to 8.0i Patch 12

Description The issue is related to a buffer overflow in the On-Access Scanner. This allows remote attackers to execute arbitrary code via a long filename containing multi-byte (Unicode) characters, but it requires user assistance.

Recommendations For versions prior to 8.0i Patch 12, update to 8.0i Patch 12 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-2152

Produtos afetados

Mcafee Virusscan Enterprise

Referências · 9

• http://vupen.com/english/advisories/2007/1435 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33732 · Nota
• http://securityfocus.com/bid/23543 · Nota
• http://kb.cert.org/vuls/id/324929 · Nota
• http://securitytracker.com/id?1017928 · Correção
• http://secunia.com/advisories/24914 · Aviso do Fabricante
• https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=612750&command=show&forward=nonthreadedKC · Aviso do Fabricante
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=515 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2152 · Nota de Segurança