Lucene search
HistoryOct 18, 2007 - 10:00 a.m.
CVE-2002-2282
mcafee
virusscan
arbitrary code execution
dlls
security vulnerability
cve-2002-2282
nvd
7.2 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user’s home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs.
Affected configurations
Node
mcafeevirusscanMatch4.5.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| mcafee:virusscan | mcafee virusscan | eq | 4.5.1 |
7.2 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2002-2282