CVE-2012-5879
McAfee Virtual Technician and ePO-MVT < 6.5.0.2101 - Arbitrary File Write via McHealthCheck.dll Save Method
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-5879. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This exploit leverages an insecure ActiveX method (Save()) in McAfee Virtual Technician's McHealthCheck.dll to overwrite or create arbitrary files in the context of the current user. The PoC is a simple HTML page with VBScript that triggers the vulnerability via a button click.
Description
An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method.
Exploits (1)
This exploit leverages an insecure ActiveX method (Save()) in McAfee Virtual Technician's McHealthCheck.dll to overwrite or create arbitrary files in the context of the current user. The PoC is a simple HTML page with VBScript that triggers the vulnerability via a button click.