PT-2007-3494 · Mcafee · Mcafee Virusscan Enterprise

Published 2007-04-19 · Updated 2017-07-29 · CVE-2007-2152

Positive Technologies (AI Summary)

CVSS v2.0

7.9

High

Base vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions prior to 8.0i Patch 12

Description The issue is related to a buffer overflow in the On-Access Scanner. This allows remote attackers to execute arbitrary code via a long filename containing multi-byte (Unicode) characters, but it requires user assistance.

Recommendations For versions prior to 8.0i Patch 12, update to 8.0i Patch 12 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-2152

Affected Products

Mcafee Virusscan Enterprise

References · 9

• http://securitytracker.com/id?1017928 · Patch
• http://secunia.com/advisories/24914 · Vendor Advisory
• https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=612750&command=show&forward=nonthreadedKC · Vendor Advisory
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=515 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2152 · Security Note
• http://vupen.com/english/advisories/2007/1435 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33732 · Note
• http://securityfocus.com/bid/23543 · Note
• http://kb.cert.org/vuls/id/324929 · Note