high8.2Public exploit code
CVE-2012-5879
An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbit…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- McAfee Virtual Technician (MVT) 6.5.0.2101 - Insecure ActiveX Method2013-03-29 · remote · windows
Impact
An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mcafee | Mcafee Virtual Technician | through 6.5.0.2101 Version 6.3.0.1911 |
| Mcafee | Epo Mcafee Virtual Technician | through 6.5.0.2101 Versions 1.0, 1.0.4.0, 1.0.7, 1.0.8, 1.0.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2013-03/0143.html
- http://osvdb.org/91700
- http://www.securityfocus.com/bid/58750
- http://www.securitytracker.com/id/1028357
- https://kc.mcafee.com/corporate/index?page=content&id=SB10040
- https://www.htbridge.com/advisory/HTB23128
- http://archives.neohapsis.com/archives/bugtraq/2013-03/0143.html
- http://osvdb.org/91700
- http://www.securityfocus.com/bid/58750
- http://www.securitytracker.com/id/1028357
- https://kc.mcafee.com/corporate/index?page=content&id=SB10040
- https://www.htbridge.com/advisory/HTB23128