[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247768

 
 

909

 
 

194555

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Remote code execution vulnerability in McAfee VirusScan Enterprise

ID: oval:org.secpod.oval:def:7787Date: (C)2012-11-05   (M)2022-10-10
Class: VULNERABILITYFamily: windows




The host is installed with McAfee VirusScan Enterprise 8.5i or 8.7i and is prone to remote code execution vulnerability. A flaw is present in the application, which fails to properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center. Successful exploitation allows attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution.

Platform:
Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows XP
Product:
McAfee VirusScan Enterprise
Reference:
CVE-2010-3496
CVE    1
CVE-2010-3496
CPE    3
cpe:/a:mcafee:virusscan_enterprise
cpe:/a:mcafee:virusscan_enterprise:8.5i
cpe:/a:mcafee:virusscan_enterprise:8.7i

© SecPod Technologies