PT-2007-2647 · Mcafee · Mcafee Virusscan For Mac

Published 2007-03-02 · Updated 2018-10-16 · CVE-2007-1226

Positive Technologies (AI Summary)

CVSS v2.0

4.1

Medium

Base vector

AV:L/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions McAfee VirusScan for Mac (Virex) versions prior to 7.7 patch 1

Description The issue is related to weak permissions for the /Library/Application Support/Virex/VShieldExclude.txt file, which allows local users to modify the configuration of Virex. This could enable users to exclude arbitrary files from being scanned, potentially allowing malicious files to remain undetected.

Recommendations For versions prior to 7.7 patch 1, update to version 7.7 patch 1 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2007-1226

Affected Products

Mcafee Virusscan For Mac

References · 9

• 🔥 http://securityfocus.com/bid/22744 · Exploit
• https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=518722&sliceId=SAL_Public&command=show&forward=nonthreadedKC&kcId=518722 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1226 · Security Note
• http://secunia.com/advisories/24337 · Vendor Advisory
• http://securitytracker.com/id?1017707 · Note
• http://securityfocus.com/archive/1/461485/100/0/threaded · Note
• http://vupen.com/english/advisories/2007/0777 · Note
• http://securityreason.com/securityalert/2342 · Note
• http://osvdb.org/33798 · Note