CVE-2007-2584: Buffer Overflow

Published May 9, 2007

Updated

Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument.

Affected Software

10 affected components

McAfee Security Center=4.3

McAfee Security Center=6.0

McAfee Security Center=6.0.22

McAfee Security Center=7.0

McAfee Security Center=7.1

McAfee Security Center=7.2

McAfee Securitycenter Agent=6.0

McAfee VirusScan=10.0.27

McAfee VirusScan=2004

McAfee VirusScan=2005

Remediation

Patch Available

http://secunia.com/advisories/25173

Event History

May 10, 2007

CVE Published

12:19 AM

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2584?

CVE-2007-2584 has been rated as critical due to its potential to allow remote code execution.

How do I fix CVE-2007-2584?

To fix CVE-2007-2584, update McAfee SecurityCenter and McAfee VirusScan to versions 6.0.25 or 7.2.147 or later.

What software is affected by CVE-2007-2584?

CVE-2007-2584 affects various versions of McAfee SecurityCenter and McAfee VirusScan, specifically those prior to the patched versions.

Can CVE-2007-2584 be exploited remotely?

Yes, CVE-2007-2584 can be exploited remotely through a crafted argument targeting the vulnerable ActiveX control.

What type of attack does CVE-2007-2584 facilitate?

CVE-2007-2584 facilitates arbitrary code execution attacks, allowing attackers to execute malicious code on the affected system.