PT-2012-5506 · Microsoft+1 · Internet Explorer+2

Publicado 2012-08-22 · Atualizado 2012-08-22 · CVE-2012-4598

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee Virtual Technician versions prior to 6.4 ePO-MVT versions prior to 6.4

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, such as an Internet Explorer crash, via a crafted web site. This is due to an unspecified ActiveX control in the affected software.

Recommendations For McAfee Virtual Technician versions prior to 6.4, update to version 6.4 or later. For ePO-MVT versions prior to 6.4, update to version 6.4 or later.

Exploit

Correção

Identificadores relacionados

CVE-2012-4598

Produtos afetados

Internet Explorer

Mcafee Virtual Technician

Epo-Mvt

Referências · 5

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mcafee_mvt_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18812 · Exploit
• 🔥 https://exploit-db.com/exploits/18805 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-4598 · Nota de Segurança
• https://kc.mcafee.com/corporate/index?page=content&id=SB10028 · Aviso do Fabricante