PT-2007-3903 · Mcafee · Mcsubmgr.Mcsubmgr Subscription Manager Activex Control+1

Published 2007-05-09 · Updated 2017-07-29 · CVE-2007-2584

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee SecurityCenter versions prior to 6.0.25 McAfee SecurityCenter versions 7.x prior to 7.2.147

Description A buffer overflow issue exists in the IsOldAppInstalled function within the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL). This allows remote attackers to execute arbitrary code via a crafted argument.

Recommendations For McAfee SecurityCenter versions prior to 6.0.25, update to version 6.0.25 or later. For McAfee SecurityCenter versions 7.x prior to 7.2.147, update to version 7.2.147 or later.

Exploit

Fix

Related Identifiers

CVE-2007-2584

Affected Products

Mcafee Securitycenter

Mcsubmgr.Mcsubmgr Subscription Manager Activex Control

References · 11

• 🔥 https://exploit-db.com/exploits/3893 · Exploit
• http://secunia.com/advisories/25173 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2584 · Security Note
• http://vupen.com/english/advisories/2007/1717 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528 · Note
• http://ts.mcafeehelp.com/faq3.asp?docid=419189 · Note
• http://securityfocus.com/bid/23909 · Note
• http://securityfocus.com/bid/23888 · Note
• http://osvdb.org/35874 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34179 · Note
• http://securitytracker.com/id?1018028 · Note