CVE-2007-2152
8.7 High
AI Score
Confidence
Low
7.9 High
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:M/Au:N/C:C/I:C/A:C
0.802 High
EPSS
Percentile
98.3%
Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execute arbitrary code via a long filename containing multi-byte (Unicode) characters.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mcafee:virusscan_enterprise | mcafee virusscan enterprise | le | 8.0i |
References
labs.idefense.com/intelligence/vulnerabilities/display.php?id=515
secunia.com/advisories/24914
www.kb.cert.org/vuls/id/324929
www.securityfocus.com/bid/23543
www.securitytracker.com/id?1017928
www.vupen.com/english/advisories/2007/1435
exchange.xforce.ibmcloud.com/vulnerabilities/33732
knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=612750&command=show&forward=nonthreadedKC
8.7 High
AI Score
Confidence
Low
7.9 High
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:M/Au:N/C:C/I:C/A:C
0.802 High
EPSS
Percentile
98.3%