CVE-2007-2584

Description

Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument.

Affected products

• McAfee / security_center4.3 – 4.3
• McAfee / security_center6.0 – 6.0
• McAfee / security_center6.0.22 – 6.0.22
• McAfee / security_center7.0 – 7.0
• McAfee / security_center7.1 – 7.1
• McAfee / security_center7.2 – 7.2
• McAfee / securitycenter_agent6.0 – 6.0
• McAfee / virusscan10.0.27 – 10.0.27
• McAfee / virusscan2004 – 2004
• McAfee / virusscan2005 – 2005

Exploits & proofs of concept

• exploit-dbMcAfee Security Center IsOldAppInstalled - ActiveX Buffer Overflowby Jambalaya

References

• MISChttp://www.securitytracker.com/id?1018028
• MISChttp://www.securityfocus.com/bid/23888
• MISChttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528
• MISChttp://osvdb.org/35874
• VENDOR_ADVISORYhttp://secunia.com/advisories/25173
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2007/1717
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/34179
• MISChttp://www.securityfocus.com/bid/23909
• MISChttp://ts.mcafeehelp.com/faq3.asp?docid=419189