CVE-2006-4886

Description

The VirusScan On-Access Scan component in McAfee VirusScan Enterprise 7.1.0 and Scan Engine 4.4.00 allows local privileged users to bypass security restrictions and disable the On-Access Scan option by opening the program via the task bar and quickly clicking the Disable button, possibly due to an interface-related race condition.

Affected products

• McAfee / scan_engine4.4.00 – 4.4.00
• McAfee / VirusScan Enterprise7.1.0 – 7.1.0

References

• MISChttp://securityreason.com/securityalert/1605
• MISChttp://www.securityfocus.com/archive/1/446220/100/0/threaded
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/28971