CVE-2007-1498 Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) in the ePO management console in McAfee ePolicy Orchestrator (ePO) before 3.6.1 Patch 1 and Protect...
HighCVSS 9.3
EPSS 7.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) in the ePO management console in McAfee ePolicy Orchestrator (ePO) before 3.6.1 Patch 1 and ProtectionPilot (PRP) before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument to the (1) ExportSiteList and (2) VerifyPackageCatalog functions, and (3) unspecified vectors involving a swprintf function call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee epolicy orchestrator | = 3.5.0 | No fix listed |
| mcafee epolicy orchestrator | = 3.6.0 | No fix listed |
| mcafee epolicy orchestrator | = 3.6.1 | No fix listed |
| mcafee protectionpilot | = 1.1.1-p3 | No fix listed |
| mcafee protectionpilot | = 1.5.0 | No fix listed |
References
- 20070314 [Advisory]McAfee ePolicy Orchestrator Multiple Remote Buffer Overflow Vulnerabilities mailing-list patch
- 24466 patch third-party-advisory vendor-advisory
- 2444 third-party-advisory
- VU#714593 third-party-advisory us-government-resource
- 22952 patch vdb-entry
- 1017757 vdb-entry
- ADV-2007-0931 vdb-entry
- knowledge.mcafee.com patch
- knowledge.mcafee.com patch