critical9.3Public exploit code
CVE-2012-4598
An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- McAfee Virtual Technician MVTControl 6.3.0.1911 - GetObject (Metasploit)2012-05-01 · remote · windows · Verified
- McAfee Virtual Technician 6.3.0.1911 MVT.MVTControl.6300 - ActiveX 'GetObject()' Code Execution2012-04-30 · remote · windows · Verified
Impact
An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mcafee | Mcafee Virtual Technician | through 6.3.0.1911 |
| Mcafee | Epo Mcafee Virtual Technician | through 1.0.7 Versions 1.0, 1.0.4.0 |