McAfee VirusScan Enterprise Security Bypass Vulnerability - Windows

McAfee VirusScan Enterprise is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

McAfee VirusScan Enterprise本地权限提升漏洞

BUGTRAQ ID: 58163 McAfee VirusScan是一款流行的实时病毒保护应用程序。 McAfee VirusScan Enterprise 8.8 Patch 2在管理员开启了访问保护后，VSE的一个组件允许权限提升，通过身份验证的用户可利用此漏洞提升权限。此漏洞影响关闭了访问保护和自保护的VSE 8.8 Patch 2。 0 McAfee VirusScan Enterprise 8.8 Patch 2 厂商补丁： McAfee ------ McAfee已经为此发布了一个安全公告（SB10038）以及相应补丁: SB10038：McAfee Security...

What does the Poetry with Citadel trojan ?

Recently we published an article on the attacks against Japanese banks using a new variant of the popular Zeus, one of the most prolific malware of recent history, security experts in fact have detected various versions of the popular malicious code that hit also mobile and social networking...

McAfee VirusScan Enterprise Untrusted Search Path Vulnerability (Windows)

This host is installed with McAfee VirusScan Enterprise and is prone to untrusted search path vulnerability. OpenVAS Vulnerability Test $Id: gbmcafeevseuntrustedsearchpathvulnwin.nasl 6115 2017-05-12 09:03:25Z teissa $ McAfee VirusScan Enterprise Untrusted Search Path Vulnerability Windows Author...

McAfee VirusScan Enterprise Untrusted Search Path Vulnerability - Windows

McAfee VirusScan Enterprise is prone to untrusted search path vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cryptzone / McAfee Bypass / Code Execution

Hi all, The following vulnerabilities have not been reported at Bugtraq before, and unfortunately they seem to be largely unknown in public even though they are about a year old by now. They have both been patched by the vendors after I discovered them and reported it. It appears to be very hard ...

McAfee ePolicy Orchestrator Framework Services HTTP Code Injection (CVE-2008-1855)

A buffer overflow vulnerability exists in McAfee Framework Services used in McAfee ePolicy Orchestrator and other products...

Ransomware Extortion Scam Locks Machines, Demands Payment

The latest ransomware scam is locking down infected machines and displaying localized webpages warning users that their computer contains “banned material” and won’t be unlocked until a fine is paid, according to a report from McAfee’s Naganathan Jawahar. The Trojan displays a warning, purportedl...

Report Contends 'Project Blitzkrieg' Threat Credible

Earlier reports of a planned, sophisticated attack on 30 U.S. banks to siphon millions from fake wire transfers have been vetted by McAfee Labs in a just-released report. Speculation about the authenticity of the planned attack, dubbed Project Blitzkrieg, on large U.S. financial institutions...

Основатель компании McAfee попросил убежища в Гватемале

Основатель компании McAfee Джон Макафи, которого подозревают в убийстве своего соседа в Белизе, попросил убежища в Гватемале. Об этом сообщает Agence France-Presse со ссылкой на адвоката Макафи. Как сообщил адвокат Телесфоро Гуэрра, которого Макафи нанял в Гватемале, его подзащитный пересек грани...

McAfee WebShield SMTP Unsupported

The install of McAfee WebShield SMTP listening on the remote host is no longer supported since the product reached End of Life on March 31, 2010. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security...

McAfee Virtual Technician ActiveX Control Insecure Method

High-Tech Bridge Security Research Lab discovered vulnerability in McAfee Virtual Technician ActiveX control, which can be exploited by remote malicious person to overwrite arbitrary files with garbage data on a vulnerable system. 1 Insecure method in McAfee Virtual Technician ActiveX control:...

PixSteal-A Trojan Steals Images, Uploads to Iraqi FTP Server

A new Trojan has been identified that has the capability of stealing images from infected computers, setting the stage for anything from identity theft to blackmail. PixSteal-A also pilfers .dmp, or Windows memory dump files that contain data on system crashes and sends all stolen data to a remot...

Beware of Fake-Antivirus "Win 8 Security System"

Late in August McAfee Labs discovered a Fake Antivirus program that claims to detect infections, and displays alerts to scare users into purchasing protection. On the contrary, this program is not genuine software and has nothing to do with reliable and effective AV tools. The truth is that this ...

FBI Warning : New Malware attacking Android smartphones

Users should be aware that Cyber criminals are finding new ways to install malicious software on devices. The latest threat to Android phone users, according to the FBI, is a "work-at-home opportunity that promises a profitable payday just for sending out email." The IC3 has been made aware of...

CVE-2012-4014

Unspecified vulnerability in McAfee Email Anti-virus formerly WebShield SMTP allows remote attackers to cause a denial of service via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in McAfee Email Anti-virus formerly WebShield SMTP allows remote attackers to cause a denial of service via unknown vectors...

CVE-2012-4014

Unspecified vulnerability in McAfee Email Anti-virus formerly WebShield SMTP allows remote attackers to cause a denial of service via unknown vectors...

CVE-2012-4014

CVE-2012-4014 affects McAfee Email Anti-virus (formerly WebShield SMTP). The vulnerability enables remote denial of service via unspecified vectors; impact is DoS as described by multiple sources. Public details are consistent across NVD, Red Hat, JVN entries, and CVE listings. Remediation is not...

McAfee Virtual Technician ActiveX Control Insecure Method Code Execution (CVE-2012-4598)

A remote code execution vulnerability has been reported in McAfee Virtual Technician. The vulnerability is due to a design weakness in a certain method, which allows instantiation of an arbitrary object on the vulnerable system. A remote attacker can exploit this vulnerability by enticing a targe...