medium6.8Public exploit code

CVE-2006-3961

Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, P…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

McAfee Subscription Manager - Remote Stack Buffer Overflow (Metasploit)2010-07-03 · remote · windows · Verified

Impact

Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute arbitrary commands via long string parameters, which are later used in vsprintf.

Affected products

Vendor	Product	Affected versions
Mcafee	Antispyware	Versions 2005, 2006
Mcafee	Internet Security Suite	Versions 2004, 2005, 2006
Mcafee	Personal Firewall Plus	Versions 2004, 2005, 2006
Mcafee	Privacy Service	Versions 2004, 2005, 2006
Mcafee	Quickclean	Versions 2004, 2005, 2006
Mcafee	Security Center	Versions 4.3, 6.0, 6.0.22, 6.0.23
Mcafee	Spamkiller	Versions 5.0, 6.0, 7.0
Mcafee	Virusscan	Versions 2004, 2005, 2006
Mcafee	Wireless Home Network Security	Version 2006

Weakness classification

CWE-119

Public exploit code

Impact

Affected products

Weakness classification

References