Vulnerabilites related to mcafee - securitycenter_agent
Vulnerability from fkie_nvd
Published
2007-05-10 00:19
Modified
2024-11-21 00:31
Severity ?
Summary
Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| mcafee | security_center | 4.3 | |
| mcafee | security_center | 6.0 | |
| mcafee | security_center | 6.0.22 | |
| mcafee | security_center | 7.0 | |
| mcafee | security_center | 7.1 | |
| mcafee | security_center | 7.2 | |
| mcafee | securitycenter_agent | 6.0 | |
| mcafee | virusscan | 10.0.27 | |
| mcafee | virusscan | 2004 | |
| mcafee | virusscan | 2005 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mcafee:security_center:4.3:*:*:*:*:*:*:*",
"matchCriteriaId": "DD547C9C-9D50-49ED-8EFE-1DD7484DDED5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:security_center:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "210F5447-4FC7-4278-9F2A-C64BBB5A86DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:security_center:6.0.22:*:*:*:*:*:*:*",
"matchCriteriaId": "BECBD40D-ACBD-4E88-B230-ECFE98FD9F5D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:security_center:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8E42B079-DC23-43AC-9437-62B97C88EF3C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:security_center:7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "449EAAD6-C4B6-4EC9-9059-1D447C1D60F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:security_center:7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "D27864F9-A378-4690-9C17-C3B6A55135F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:securitycenter_agent:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FC64577D-EFD8-4D30-B95A-D26075CFD063",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:virusscan:10.0.27:*:*:*:*:*:*:*",
"matchCriteriaId": "8CC6DF56-10C0-4682-B466-EBBC3640DCE4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:virusscan:2004:*:*:*:*:*:*:*",
"matchCriteriaId": "4D9B7B07-E3EF-4185-927C-CE308829B9A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:virusscan:2005:*:*:*:*:*:*:*",
"matchCriteriaId": "F58D6A2F-AC08-4C1D-9ABF-4D675A1E87AC",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument."
},
{
"lang": "es",
"value": "Desbordamiento de b\u00fafer en la funci\u00f3n IsOldAppInstalled del control ActiveX McSubMgr.McSubMgr Subscription Manager (MCSUBMGR.DLL) en McAfee SecurityCenter anterior a 6.0.25 y 7.x anterior a 7.2.147 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante un argumento manipulado."
}
],
"id": "CVE-2007-2584",
"lastModified": "2024-11-21T00:31:08.720",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": true,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2007-05-10T00:19:00.000",
"references": [
{
"source": "cve@mitre.org",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528"
},
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/35874"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/25173"
},
{
"source": "cve@mitre.org",
"url": "http://ts.mcafeehelp.com/faq3.asp?docid=419189"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/23888"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/23909"
},
{
"source": "cve@mitre.org",
"url": "http://www.securitytracker.com/id?1018028"
},
{
"source": "cve@mitre.org",
"url": "http://www.vupen.com/english/advisories/2007/1717"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34179"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/35874"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/25173"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://ts.mcafeehelp.com/faq3.asp?docid=419189"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/23888"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/23909"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securitytracker.com/id?1018028"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.vupen.com/english/advisories/2007/1717"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34179"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
cve-2007-2584
Vulnerability from cvelistv5
Published
2007-05-09 22:00
Modified
2024-08-07 13:42
Severity ?
EPSS score ?
Summary
Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.securitytracker.com/id?1018028 | vdb-entry, x_refsource_SECTRACK | |
| http://www.securityfocus.com/bid/23888 | vdb-entry, x_refsource_BID | |
| http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528 | third-party-advisory, x_refsource_IDEFENSE | |
| http://osvdb.org/35874 | vdb-entry, x_refsource_OSVDB | |
| http://secunia.com/advisories/25173 | third-party-advisory, x_refsource_SECUNIA | |
| http://www.vupen.com/english/advisories/2007/1717 | vdb-entry, x_refsource_VUPEN | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/34179 | vdb-entry, x_refsource_XF | |
| http://www.securityfocus.com/bid/23909 | vdb-entry, x_refsource_BID | |
| http://ts.mcafeehelp.com/faq3.asp?docid=419189 | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T13:42:33.407Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1018028",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1018028"
},
{
"name": "23888",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/23888"
},
{
"name": "20070508 McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability",
"tags": [
"third-party-advisory",
"x_refsource_IDEFENSE",
"x_transferred"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528"
},
{
"name": "35874",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/35874"
},
{
"name": "25173",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/25173"
},
{
"name": "ADV-2007-1717",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/1717"
},
{
"name": "mcafee-mcsubmgr-activex-bo(34179)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34179"
},
{
"name": "23909",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/23909"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://ts.mcafeehelp.com/faq3.asp?docid=419189"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-05-08T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-28T12:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1018028",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1018028"
},
{
"name": "23888",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/23888"
},
{
"name": "20070508 McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability",
"tags": [
"third-party-advisory",
"x_refsource_IDEFENSE"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528"
},
{
"name": "35874",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/35874"
},
{
"name": "25173",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/25173"
},
{
"name": "ADV-2007-1717",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/1717"
},
{
"name": "mcafee-mcsubmgr-activex-bo(34179)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34179"
},
{
"name": "23909",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/23909"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://ts.mcafeehelp.com/faq3.asp?docid=419189"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-2584",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1018028",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1018028"
},
{
"name": "23888",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/23888"
},
{
"name": "20070508 McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability",
"refsource": "IDEFENSE",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528"
},
{
"name": "35874",
"refsource": "OSVDB",
"url": "http://osvdb.org/35874"
},
{
"name": "25173",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/25173"
},
{
"name": "ADV-2007-1717",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/1717"
},
{
"name": "mcafee-mcsubmgr-activex-bo(34179)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34179"
},
{
"name": "23909",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/23909"
},
{
"name": "http://ts.mcafeehelp.com/faq3.asp?docid=419189",
"refsource": "CONFIRM",
"url": "http://ts.mcafeehelp.com/faq3.asp?docid=419189"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-2584",
"datePublished": "2007-05-09T22:00:00",
"dateReserved": "2007-05-09T00:00:00",
"dateUpdated": "2024-08-07T13:42:33.407Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}