Cryptzone / McAfee Bypass / Code Execution

Hi all, The following vulnerabilities have not been reported at Bugtraq before, and unfortunately they seem to be largely unknown in public even though they are about a year old by now. They have both been patched by the vendors after I discovered them and reported it. It appears to be very hard ...

McAfee ePolicy Orchestrator Framework Services HTTP Code Injection (CVE-2008-1855)

A buffer overflow vulnerability exists in McAfee Framework Services used in McAfee ePolicy Orchestrator and other products...

Ransomware Extortion Scam Locks Machines, Demands Payment

The latest ransomware scam is locking down infected machines and displaying localized webpages warning users that their computer contains “banned material” and won’t be unlocked until a fine is paid, according to a report from McAfee’s Naganathan Jawahar. The Trojan displays a warning, purportedl...

Report Contends 'Project Blitzkrieg' Threat Credible

Earlier reports of a planned, sophisticated attack on 30 U.S. banks to siphon millions from fake wire transfers have been vetted by McAfee Labs in a just-released report. Speculation about the authenticity of the planned attack, dubbed Project Blitzkrieg, on large U.S. financial institutions...

Основатель компании McAfee попросил убежища в Гватемале

Основатель компании McAfee Джон Макафи, которого подозревают в убийстве своего соседа в Белизе, попросил убежища в Гватемале. Об этом сообщает Agence France-Presse со ссылкой на адвоката Макафи. Как сообщил адвокат Телесфоро Гуэрра, которого Макафи нанял в Гватемале, его подзащитный пересек грани...

McAfee WebShield SMTP Unsupported

The install of McAfee WebShield SMTP listening on the remote host is no longer supported since the product reached End of Life on March 31, 2010. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security...

McAfee Virtual Technician ActiveX Control Insecure Method

High-Tech Bridge Security Research Lab discovered vulnerability in McAfee Virtual Technician ActiveX control, which can be exploited by remote malicious person to overwrite arbitrary files with garbage data on a vulnerable system. 1 Insecure method in McAfee Virtual Technician ActiveX control:...

PixSteal-A Trojan Steals Images, Uploads to Iraqi FTP Server

A new Trojan has been identified that has the capability of stealing images from infected computers, setting the stage for anything from identity theft to blackmail. PixSteal-A also pilfers .dmp, or Windows memory dump files that contain data on system crashes and sends all stolen data to a remot...

Beware of Fake-Antivirus "Win 8 Security System"

Late in August McAfee Labs discovered a Fake Antivirus program that claims to detect infections, and displays alerts to scare users into purchasing protection. On the contrary, this program is not genuine software and has nothing to do with reliable and effective AV tools. The truth is that this ...

FBI Warning : New Malware attacking Android smartphones

Users should be aware that Cyber criminals are finding new ways to install malicious software on devices. The latest threat to Android phone users, according to the FBI, is a "work-at-home opportunity that promises a profitable payday just for sending out email." The IC3 has been made aware of...

CVE-2012-4014

Unspecified vulnerability in McAfee Email Anti-virus formerly WebShield SMTP allows remote attackers to cause a denial of service via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in McAfee Email Anti-virus formerly WebShield SMTP allows remote attackers to cause a denial of service via unknown vectors...

CVE-2012-4014

Unspecified vulnerability in McAfee Email Anti-virus formerly WebShield SMTP allows remote attackers to cause a denial of service via unknown vectors...

CVE-2012-4014

CVE-2012-4014 affects McAfee Email Anti-virus (formerly WebShield SMTP). The vulnerability enables remote denial of service via unspecified vectors; impact is DoS as described by multiple sources. Public details are consistent across NVD, Red Hat, JVN entries, and CVE listings. Remediation is not...

CVE-2012-4014: Undefined Security Weakness

Unspecified vulnerability in McAfee Email Anti-virus formerly WebShield SMTP allows remote attackers to cause a denial of service via unknown vectors...

McAfee Virtual Technician ActiveX Control Insecure Method Code Execution (CVE-2012-4598)

A remote code execution vulnerability has been reported in McAfee Virtual Technician. The vulnerability is due to a design weakness in a certain method, which allows instantiation of an arbitrary object on the vulnerable system. A remote attacker can exploit this vulnerability by enticing a targe...

Email Anti-virus (formerly WebShield SMTP) vulnerable to denial-of-service

Overview Email Anti-virus formerly WebShield SMTP provided by McAfee Co., Ltd. contains a denial-of-service DoS vulnerability. Email Anti-virus formerly WebShield SMTP provided by McAfee Co., Ltd. is an anti-virus package that scans emails. Email Anti-virus formerly WebShield SMTP contains a...

JVN#50701493: Email Anti-virus (formerly WebShield SMTP) vulnerable to denial-of-service

Email Anti-virus formerly WebShield SMTP provided by McAfee Co., Ltd. is an anti-virus package that scans emails. Email Anti-virus formerly WebShield SMTP contains a denial-of-service DoS vulnerability. Impact An attacker may be able to cause a denial-of-service DoS. Solution Do not use Email...

Mobile Malware Is Up – Way Up – in McAfee Q2 Threat Report

McAfee Labs researchers today announced a surge in malware samples this year – particularly threats that take advantage of mobile networks to launch drive-by downloads, control botnets using Twitter and spread ransomware that locks down infected machines and demand payments from users. The Santa...

McAfee Virtual Technician ActiveX Control GetObject() Method Remote Command Execution (SB10028)

The remote Windows host has a version of the McAfee Virtual Technician / ePolicy Orchestrator ActiveX control that allows execution of arbitrary code. The 'GetObject' method can be used to load any class on the underlying operating system. For example, by loading the 'WScript.Shell' class,...