[Full-disclosure] iDefense Security Advisory 04.17.07: McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow

McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow iDefense Security Advisory 04.17.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 17, 2007 I. BACKGROUND McAfee VirusScan is an AntiVirus application that offers protection against the latest computer virus...

McAfee E-Business Admin Server DoS

Read access to unallocated memory during authentication...

Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP)

This module exploits a buffer overflow vulnerability in the LoadAniIcon function of USER32.dll. The flaw is triggered through Outlook Express by using the CURSOR style sheet directive to load a malicious .ANI file. This vulnerability was discovered by Alexander Sotirov of Determina and was...

Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP)

This module exploits a buffer overflow vulnerability in the LoadAniIcon function in USER32.dll. The flaw can be triggered through Internet Explorer 6 and 7 by using the CURSOR style sheet directive to load a malicious .ANI file. The module can also exploit Mozilla Firefox by using a UNC path in a...

McAfee ePolicy Orchestrator SiteManager ActiveX buffer overflow

Added: 03/22/2007 CVE: CVE-2007-1498 BID: 22952 OSVDB: 33796 Background ePolicy Orchestrator is a centralized security configuration and monitoring application. It includes the SiteManager ActiveX control which is implemented by sitemanager.dll. Problem A buffer overflow vulnerability in the...

McAfee ePolicy Orchestrator SiteManager ActiveX buffer overflow

Added: 03/22/2007 CVE: CVE-2007-1498 BID: 22952 OSVDB: 33796 Background ePolicy Orchestrator is a centralized security configuration and monitoring application. It includes the SiteManager ActiveX control which is implemented by sitemanager.dll. Problem A buffer overflow vulnerability in the...

McAfee ePolicy Orchestrator SiteManager ActiveX buffer overflow

Added: 03/22/2007 CVE: CVE-2007-1498 BID: 22952 OSVDB: 33796 Background ePolicy Orchestrator is a centralized security configuration and monitoring application. It includes the SiteManager ActiveX control which is implemented by sitemanager.dll. Problem A buffer overflow vulnerability in the...

McAfee ePolicy Orchestrator and ProtectionPilot ActiveX control buffer overflow vulnerability

Overview A vulnerability in an ActiveX control provided with the McAfee ePolicy Orchestrator and ProtectionPilot software could allow a remote attacker to execute arbitrary code on an affected system. Description The McAfee ePolicy Orchestrator and ProtectionPilot are applications that are design...

McAfee ePolicy Orchestrator SiteManager ActiveX buffer overflow

Added: 03/22/2007 CVE: CVE-2007-1498 BID: 22952 OSVDB: 33796 Background ePolicy Orchestrator is a centralized security configuration and monitoring application. It includes the SiteManager ActiveX control which is implemented by sitemanager.dll. Problem A buffer overflow vulnerability in the...

CVE-2007-1538

McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in 1 HKEYLOCALMACHINE\SOFTWARE\McAfee\DesktopProtection or 2 HKEYLOCALMACHINE\SOFTWARE\Network Associates\TVD\VirusScan...

Design/Logic Flaw

McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in 1 HKEYLOCALMACHINE\SOFTWARE\McAfee\DesktopProtection or 2 HKEYLOCALMACHINE\SOFTWARE\Network Associates\TVD\VirusScan...

CVE-2007-1538

McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in 1 HKEYLOCALMACHINE\SOFTWARE\McAfee\DesktopProtection or 2 HKEYLOCALMACHINE\SOFTWARE\Network Associates\TVD\VirusScan...

CVE-2007-1538

The CVE-2007-1538 entry concerns McAfee VirusScan Enterprise 8.5.0.i, where insecure permissions on Windows Registry keys (HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection and HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Enterprise\CurrentVersion) allow local users to bypass l...

CVE-2007-1538: Undefined Security Weakness

McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in 1 HKEYLOCALMACHINE\SOFTWARE\McAfee\DesktopProtection or 2 HKEYLOCALMACHINE\SOFTWARE\Network Associates\TVD\VirusScan...

McAfee EPolicy Orchestrator SiteManager.DLL ActiveX控件远程缓冲区溢出漏洞

ePolicy Orchestrator是一款可扩展工具，能够管理由不同供应商的工具所构成的混合防御系统。 ePolicy Orchestrator包含的SiteManager.DLL ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 攻击者可以构建恶意WEB页，诱使用户访问来触发，目前没有详细漏洞细节提供。 0 McAfee ProtectionPilot 1.5 McAfee ProtectionPilot 1.1.1 patch 3 McAfee ePolicy Orchestrator 3.6.1 McAfee ePolicy...

[CAID 34817, 35058, 35158, 35159]: CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities

Title: CAID 34817, 35058, 35158, 35159: CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities CA Vuln ID CAID: 34817, 35058, 35158, 35159 CA Advisory Date: 2007-03-15 Reported By: McAfee Impact: Remote attackers can cause a denial of service or potentially execute arbitrary cod...

Stack overflow

Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control SiteManager.dll in the ePO management console in McAfee ePolicy Orchestrator ePO before 3.6.1 Patch 1 and ProtectionPilot PRP before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument...

CVE-2007-1498

Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control SiteManager.dll in the ePO management console in McAfee ePolicy Orchestrator ePO before 3.6.1 Patch 1 and ProtectionPilot PRP before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument...

CVE-2007-1498

Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control SiteManager.dll in the ePO management console in McAfee ePolicy Orchestrator ePO before 3.6.1 Patch 1 and ProtectionPilot PRP before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument...

CVE-2007-1498

McAfee ePolicy Orchestrator (ePO) SiteManager.dll ActiveX control contains multiple stack-based buffer overflows that allow remote code execution when long arguments are passed to ExportSiteList, VerifyPackageCatalog, or related vectors (via swprintf usage). The affected component is SiteManager....