Secunia

Jakub Moc has reported a vulnerability in McAfee VirusScan Command Line Scanner, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to the current working directory being part of the list of directories that are searched for libraries at runtime. This can be exploited to execute arbitrary code by e.g. creating a malicious shared object and tricking a user into running the scanner in the same directory.

Note: This does not affect the Windows version.

Solution
Use the scanner from trusted directories only.

Provided and/or discovered by
Jakub Moc, Gentoo Linux

Original Advisory
http://www.gentoo.org/security/en/glsa/glsa-200612-15.xml

Deep Links
Links available in Customer Area