CVE-2000-1128

The CVE describes a local privilege escalation in McAfee VirusScan 4.5 caused by not quoting ImagePath, which can allow a local user to place a Trojan executable (common.exe) in C:\Program Files by altering the search path. The affected component is the VirusScan service/installation that reads t...

CVE-2000-0119

The CVE-2000-0119 entry describes a vulnerability in McAfee VirusScan and Norton Anti-Virus where default configurations do not scan files in the Windows Recycle Bin’s RECYCLED folder. This allows an attacker to store malicious code undetected within that folder. The root cause is the failing to ...

CVE-2006-6474

The CVE-2006-6474 entry concerns McAfee VirusScan for Linux 4510e and earlier, where the DT_RPATH environment variable includes the current working directory. This insecure DT_RPATH can allow a local attacker to have the dynamic loader load untrusted ELF DSOs and execute arbitrary code by placing...

CVE-2007-2584

CVE-2007-2584 describes a buffer overflow in the IsOldAppInstalled function of McSubMgr.McSubMgr (MCSUBMGR.DLL) used by McAfee SecurityCenter. Vulnerable are SecurityCenter versions before 6.0.25 and 7.x before 7.2.147. A crafted argument can allow remote code execution with full impact on confid...

CVE-2006-3961

The CVE-2006-3961 vulnerability is a stack buffer overflow in the McAfee Subscription Manager ActiveX control (mcsubmgr.dll) used by McAfee Security Center and related products. A long/ crafted input passed to versus printf-family code (vsprintf) can overflow the stack, potentially allowing remot...

CVE-2002-2282

McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for specific DLLs in the user’s home directory even while browsing the local hard drive, enabling local users to run arbitrary code through malicious DLLs. This is described as a local-privilege impact with potential comple...

CVE-2006-5417

The CVE-2006-5417 entry concerns McAfee Network Agent (mcnasvc.exe) version 1.0.178.0 used by multiple McAfee products (e.g., Internet Security Suite, Personal Firewall Plus, VirusScan). A vulnerability allows remote attackers to cause a denial of service (agent crash) by sending a long packet, p...

CVE-2004-0831

CVE-2004-0831 concerns McAfee VirusScan 4.5.1. The vulnerability arises when using the System Scan options in the System Tray applet, where the process does not drop SYSTEM privileges before enabling users to browse for files, potentially allowing local privilege escalation. The description provi...

CVE-2000-0502

Mcafee VirusScan 4.03 is affected by a local-access restriction flaw in the alert text file before it is sent to the Central Alert Server, allowing local users to modify alerts and impact the integrity of alert data. The root cause is improper access restriction of the alert file, enabling unauth...

CVE-2006-3575

CVE-2006-3575 refers to an unknown vulnerability in the Buffer Overflow Protection of McAfee VirusScan Enterprise 8.0.0. The issue allows local users to cause a denial of service (unstable operation) by supplying an excessively long string in any of the fields: Process name, Module name, or API n...