HTTP: McAfee Manager CLSID Access

This signature detects attempts to exploit several security vulnerabilities against McAfee Subsrition Manager ClassID. Attackers can craft a malicious Web site, which if accessed by a victim, can add, remove, run any program on the victim's computer, or reboot the computer.

Extended Description

McAfee SecurityCenter is prone to a stack-based buffer-overflow vulnerability. This vulnerability requires a certain amount of user-interaction for an attack to occur, such as visiting a malicious website. A successful exploit would let a remote attacker execute code with the privileges of the currently logged in user. This issue is reported to affect versions 4.3 through 6.0.22. Please see the affected packages section for a list of McAfee consumer products that ship with vulnerable versions of the McAfee SecurityCenter.

Affected Products

Mcafee internet_security_suite

References

BugTraq: 19265

CVE: CVE-2006-3961

URL: http://www.eeye.com/html/research/advisories/AD2006807.html http://ts.mcafeehelp.com/faq3.asp?docid=407052

Short Name

HTTP:STC:CLSID:ACTIVEX:MCAFEE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: McAfee Manager CLSID Access

Extended Description

Affected Products

References

Found a potential security threat?