PT-2004-1893 · Mcafee · Mcafee Virusscan

Published 2004-09-14 · Updated 2017-07-11 · CVE-2004-0831

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: McAfee VirusScan version 4.5.1

Description: The issue allows local users to potentially gain privileges due to the software not dropping SYSTEM privileges when users browse for files via the System Scan properties of the System Tray applet.

Recommendations: For McAfee VirusScan version 4.5.1, consider restricting access to the System Scan properties of the System Tray applet to minimize the risk of exploitation until a patch is available.

Fix

Related Identifiers

CVE-2004-0831

Affected Products

Mcafee Virusscan

References · 4

• http://idefense.com/application/poi/display?id=140&type=vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0831 · Security Note
• http://marc.info/?l=bugtraq&m=109526269429728&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17367 · Note