PT-2012-5506 · Microsoft+1 · Internet Explorer+2

Published 2012-08-22 · Updated 2012-08-22 · CVE-2012-4598

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee Virtual Technician versions prior to 6.4 ePO-MVT versions prior to 6.4

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, such as an Internet Explorer crash, via a crafted web site. This is due to an unspecified ActiveX control in the affected software.

Recommendations For McAfee Virtual Technician versions prior to 6.4, update to version 6.4 or later. For ePO-MVT versions prior to 6.4, update to version 6.4 or later.

Exploit

Fix

Related Identifiers

CVE-2012-4598

Affected Products

Internet Explorer

Mcafee Virtual Technician

Epo-Mvt

References · 5

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mcafee_mvt_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18812 · Exploit
• 🔥 https://exploit-db.com/exploits/18805 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-4598 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10028 · Vendor Advisory