McAfee VirusScan Security Center ActiveX Control Arbitrary File Overwrite Vulnerability

Bugtraq ID:	15986
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 20 2005 12:00AM
Updated:	Dec 20 2005 12:00AM
Credit:	Discovered by Peter Vreugdenhil.
Vulnerable:	McAfee VirusScan 9.0 McAfee VirusScan 8.0 McAfee VirusScan 7.1 McAfee VirusScan 7.0 McAfee VirusScan 6.0 McAfee VirusScan 5.0 McAfee VirusScan 4.5.1 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional SP1 - Microsoft Windows XP Professional McAfee VirusScan 4.5 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 McAfee VirusScan 4.0.3 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 McAfee VirusScan 4.0 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0
Not Vulnerable:

McAfee VirusScan Security Center ActiveX Control Arbitrary File Overwrite Vulnerability

McAfee VirusScan Security Center is prone to an arbitrary file overwrite vulnerability. Attackers are able to create and modify arbitrary files.

Successful exploitation can lead to various attacks including potential arbitrary code execution and remote unauthorized access.

McAfee VirusScan Security Center ActiveX Control Arbitrary File Overwrite Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

McAfee VirusScan Security Center ActiveX Control Arbitrary File Overwrite Vulnerability

Solution:
McAfee has released updates to address this issue. These fixes can be installed automatically or manually through the products' 'Updates' feature.

McAfee VirusScan Security Center ActiveX Control Arbitrary File Overwrite Vulnerability

References:

• McAfee Homepage (McAfee)
  
• McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite ("[email protected]" )