CVE-2011-3006: XSS
The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to bypass the MyASUtil.SecureObjectFactory.CreateSecureObject domain execution policy using a cross-site scripting (XSS) attack, execute arbitrary code using the MyASUtil.InstallInfo.RunUserProgram function, and possibly conduct other unspecified attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3006?
CVE-2011-3006 is categorized as a high severity vulnerability due to its potential for remote code execution.
What software is affected by CVE-2011-3006?
CVE-2011-3006 affects McAfee SaaS Endpoint Protection versions up to and including 5.2.1.
How do I mitigate CVE-2011-3006?
To mitigate CVE-2011-3006, it is recommended to update McAfee SaaS Endpoint Protection to a version beyond 5.2.1.
What type of vulnerability is CVE-2011-3006?
CVE-2011-3006 is a cross-site scripting (XSS) vulnerability that allows attackers to bypass security policies.
Can exploitation of CVE-2011-3006 lead to data breaches?
Yes, exploitation of CVE-2011-3006 can lead to unauthorized remote code execution, potentially resulting in data breaches.