CVE-2004-0831: High severity McAfee VirusScan vulnerability

Published Sep 14, 2004

Updated

McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges.

Affected Software

2 affected components

McAfee VirusScan=4.5

McAfee VirusScan=4.5.1

Remediation

Patch Available

http://www.idefense.com/application/poi/display?id=140&type=vulnerabilities

Event History

Sep 14, 2004

CVE Published

04:00 AM

Sep 24, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0831?

CVE-2004-0831 is considered a medium-severity vulnerability due to the potential for local privilege escalation.

How do I fix CVE-2004-0831?

To fix CVE-2004-0831, update McAfee VirusScan to a version that addresses this vulnerability, such as a later release than 4.5.1.

What are the affected versions in CVE-2004-0831?

CVE-2004-0831 affects McAfee VirusScan versions 4.5 and 4.5.1.

Who can exploit CVE-2004-0831?

CVE-2004-0831 can be exploited by local users who have access to the System Scan properties.

What are the potential impacts of CVE-2004-0831?

The potential impacts of CVE-2004-0831 include unauthorized privilege escalation allowing local users to execute actions with higher system permissions.