PT-2007-3903 · Mcafee · Mcsubmgr.Mcsubmgr Subscription Manager Activex Control+1

Publicado 2007-05-09 · Atualizado 2017-07-29 · CVE-2007-2584

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee SecurityCenter versions prior to 6.0.25 McAfee SecurityCenter versions 7.x prior to 7.2.147

Description A buffer overflow issue exists in the IsOldAppInstalled function within the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL). This allows remote attackers to execute arbitrary code via a crafted argument.

Recommendations For McAfee SecurityCenter versions prior to 6.0.25, update to version 6.0.25 or later. For McAfee SecurityCenter versions 7.x prior to 7.2.147, update to version 7.2.147 or later.

Exploit

Correção

Identificadores relacionados

CVE-2007-2584

Produtos afetados

Mcafee Securitycenter

Mcsubmgr.Mcsubmgr Subscription Manager Activex Control

Referências · 11

• 🔥 https://exploit-db.com/exploits/3893 · Exploit
• http://vupen.com/english/advisories/2007/1717 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528 · Nota
• http://secunia.com/advisories/25173 · Aviso do Fabricante
• http://ts.mcafeehelp.com/faq3.asp?docid=419189 · Nota
• http://securityfocus.com/bid/23909 · Nota
• http://securityfocus.com/bid/23888 · Nota
• http://osvdb.org/35874 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34179 · Nota
• http://securitytracker.com/id?1018028 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2584 · Nota de Segurança