CVE-2004-1908 McFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain sensitive information via the GetSpecialFolderLocation function with certain parameters.
MediumCVSS 5.0
EPSS 3.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
McFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain sensitive information via the GetSpecialFolderLocation function with certain parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee freescan | All versions | No fix listed |
References
- 20040407 Mcafee FreeScan - Remote Buffer Overflow and Private Information Disclosure exploit mailing-list
- 20040407 Symantec, McAfee and Panda ActiveX controls mailing-list
- 20040407 Mcafee FreeScan - Remote Buffer Overflow and Private Information Disclosure mailing-list
- 20040407 McAfee Freescan ActiveX Information Disclosure [Additional Details & PoC] mailing-list
- 11313 third-party-advisory
- 10077 exploit vdb-entry
- freescan-mcfscan-info-disclosure(15782) vdb-entry