critical10.0Public exploit code
CVE-2007-2584
Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- McAfee Security Center IsOldAppInstalled - ActiveX Buffer Overflow2007-05-10 · remote · windows · Verified
Impact
Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mcafee | Security Center | Versions 4.3, 6.0, 6.0.22, 7.0, 7.1, 7.2 |
| Mcafee | Securitycenter Agent | Version 6.0 |
| Mcafee | Virusscan | Versions 10.0.27, 2004, 2005 |
References
- NVD record
- CVE.org record
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528
- http://osvdb.org/35874
- http://secunia.com/advisories/25173
- http://ts.mcafeehelp.com/faq3.asp?docid=419189
- http://www.securityfocus.com/bid/23888
- http://www.securityfocus.com/bid/23909
- http://www.securitytracker.com/id?1018028
- http://www.vupen.com/english/advisories/2007/1717
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34179
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528
- http://osvdb.org/35874
- http://secunia.com/advisories/25173
- http://ts.mcafeehelp.com/faq3.asp?docid=419189
- http://www.securityfocus.com/bid/23888
- http://www.securityfocus.com/bid/23909
- http://www.securitytracker.com/id?1018028
- http://www.vupen.com/english/advisories/2007/1717
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34179