McAfee VirusScan 'hcp://' Protocol Handler Security Bypass Vulnerability

Bugtraq ID:	44184
Class:	Configuration Error
CVE:	CVE-2010-3496
Remote:	No
Local:	Yes
Published:	Oct 18 2010 12:00AM
Updated:	Oct 18 2010 12:00AM
Credit:	[email protected]
Vulnerable:	McAfee VirusScan Enterprise 8.7i
Not Vulnerable:

McAfee VirusScan 'hcp://' Protocol Handler Security Bypass Vulnerability

McAfee VirusScan is prone to a security-bypass vulnerability that may allow an attacker to bypass virus scans.

Successful exploits will allow attackers to bypass virus scanning, possibly allowing malicious files to escape detection.

McAfee VirusScan 8.7i is affected; other versions may also be vulnerable.

McAfee VirusScan 'hcp://' Protocol Handler Security Bypass Vulnerability

Attackers can exploit this issue by sending malicious files to affected users.

McAfee VirusScan 'hcp://' Protocol Handler Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

McAfee VirusScan 'hcp://' Protocol Handler Security Bypass Vulnerability

References:

• antivirus-cve (noobz Network)
  
• McAfee Homepage (McAfee)
  
• Antivirus detection after malware execution ([email protected])