CVE-2005-3657: Undefined Security Weakness

The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security Center does not use the IObjectSafetySiteLock API to restrict access to required domains, which allows remote attackers to create or append to arbitrary files via the StartLog and AddLog methods in the MCINSTALL.McLog object...

McAfee VirusScan unauthorized files access

It's possible to access client computer files with McAfee Security Center MCINSCTL.DLL ActiveX...

[Full-disclosure] iDefense Security Advisory 12.20.05: McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite

McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite iDefense Security Advisory 12.20.05 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=358 December 20, 2005 I. BACKGROUND McAfee VirusScan is an anti-virus software. More information is available from the vendor...

Security update 1970-01-01

...

MS10-073: Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege

None None...

Security update 1970-01-01

...

MS10-012: Vulnerabilities in SMB Server could allow remote code execution

None None...