CVE-2012-5879 An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument t...
HighCVSS 8.2
EPSS 5.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee virtual technician | <= 6.5.0.2101 | No fix listed |
| mcafee virtual technician | = 6.3.0.1911 | No fix listed |
| mcafee epo mcafee virtual technician | <= 6.5.0.2101 | No fix listed |
| mcafee epo mcafee virtual technician | = 1.0 | No fix listed |
| mcafee epo mcafee virtual technician | = 1.0.4.0 | No fix listed |
| mcafee epo mcafee virtual technician | = 1.0.7 | No fix listed |
| mcafee epo mcafee virtual technician | = 1.0.8 | No fix listed |
| mcafee epo mcafee virtual technician | = 1.0.9 | No fix listed |
References
- 20130327 McAfee Virtual Technician ActiveX Control Insecure Method exploit mailing-list
- 91700 vdb-entry
- 58750 exploit vdb-entry
- 1028357 vdb-entry
- kc.mcafee.com
- www.htbridge.com