ID CVE-2007-2584
Summary Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument.
References
Vulnerable Configurations
  • cpe:2.3:a:mcafee:security_center:4.3:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:security_center:4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:security_center:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:security_center:6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:security_center:6.0.22:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:security_center:6.0.22:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:security_center:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:security_center:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:security_center:7.1:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:security_center:7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:security_center:7.2:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:security_center:7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:securitycenter_agent:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:securitycenter_agent:6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:virusscan:10.0.27:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:virusscan:10.0.27:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:virusscan:2004:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:virusscan:2004:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:virusscan:2005:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:virusscan:2005:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 29-07-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid
  • 23888
  • 23909
confirm http://ts.mcafeehelp.com/faq3.asp?docid=419189
idefense 20070508 McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability
osvdb 35874
sectrack 1018028
secunia 25173
vupen ADV-2007-1717
xf mcafee-mcsubmgr-activex-bo(34179)
Last major update 29-07-2017 - 01:31
Published 10-05-2007 - 00:19
Last modified 29-07-2017 - 01:31
Back to Top