20070508 McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow VulnerabilityThird-party advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528 CVE-2007-2584
McAfee Security Center IsOldAppInstalled - ActiveX Buffer Overflow
Record summary
CVE-2007-2584 has a selected CVSS score of 10.0; EIP currently links 1 catalogued exploit.
Description
Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMcAfee Security Center IsOldAppInstalled - ActiveX Buffer OverflowExploitDB exploitby JambalayaNot analyzed1 file
References
1035874vdb entry
http://osvdb.org/35874 25173Third-party advisory
http://secunia.com/advisories/25173 ts.mcafeehelp.comConfirmation
http://ts.mcafeehelp.com/faq3.asp?docid=419189 23888vdb entry
http://www.securityfocus.com/bid/23888 23909vdb entry
http://www.securityfocus.com/bid/23909 1018028vdb entry
http://www.securitytracker.com/id?1018028 ADV-2007-1717vdb entry
http://www.vupen.com/english/advisories/2007/1717 mcafee-mcsubmgr-activex-bo(34179)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34179 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-2584