McAfee SecurityCenter Subscription Manager ActiveX Control Buffer Overflow - Secunia Advisories - Vulnerability Intelligence

McAfee SecurityCenter Subscription Manager ActiveX Control Buffer Overflow
Secunia Advisory:	SA25173	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2007-05-09
Last Update:	2007-05-10
Popularity:	9,172 views

Critical:	Highly critical
Impact:	System access
Where:	From remote
Solution Status:	Vendor Patch

Software:	McAfee AntiSpyware 6.x McAfee Internet Security Suite 2005 McAfee Internet Security Suite 2006 McAfee Internet Security Suite 2007 McAfee PC Protection Plus 2007 McAfee Personal Firewall Plus 7.x/2006 McAfee Privacy Service 6.x McAfee QuickClean 4.x McAfee QuickClean 5.x McAfee QuickClean 6.x McAfee SecurityCenter 4.x McAfee SecurityCenter 6.x McAfee SecurityCenter 7.x McAfee SpamKiller 5.x McAfee SpamKiller 6.x McAfee SpamKiller 7.x McAfee Total Protection 2007 McAfee VirusScan 10.x/2006 McAfee VirusScan 8.x/2004 McAfee VirusScan 9.x/2005 McAfee VirusScan Plus 2007 McAfee VirusScan Professional 8.x McAfee Wireless Home Network Security 2006

Binary Analysis:	BA99 :: Available for 1 Credit

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2007-2584

Description: A vulnerability has been reported in various McAfee products, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error within the SecurityCenter Subscription Manager ActiveX control (McSubMgr.dll) when handling the "IsOldAppInstalled()" method. This can be exploited to cause a buffer overflow via a specially crafted argument passed to the said method. Successful exploitation allows execution of arbitrary code when a user visits a malicious website. The vulnerability affects versions prior to 7.2.147 and 6.0.25. Solution: The fix has reportedly been available via automatic updates since March 22, 2007. Update to Security Center version 7.2.147 and 6.0.25, or higher. http://us.mcafee.com/root/login.asp Set the kill-bit for the affected ActiveX control. Provided and/or discovered by: Discovered by Peter Vreugdenhil and reported via iDefense Labs. Changelog: 2007-05-09: Updated affected product list. 2007-05-10: Added CVE reference. Original Advisory: McAfee: http://ts.mcafeehelp.com/faq3.asp?docid=419189 iDefense Labs: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528 Extended Solution: The "Extended Solution" section is available for Secunia customers only. Request a trial and get access to the Secunia Customer Area and Extended Secunia advisories.

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	6
New vulnerabilities:	12
Updated advisories:	7

Less // 41 views

HP-UX NFS/ONCplus Denial of Service Vulnerability

Not // 36 views

D-Bus "_dbus_validate_sign ature_with_reason()" Denial of Service

Highly // 40 views

iseemedia LPViewer ActiveX Control Multiple Buffer Overflow Vulnerabilities

Moderately // 39 views

IBM Lotus Quickr Security Issues and Denial of Service

Moderately // 35 views

Kwalbum "UploaditemsPage.php " File Upload Vulnerability

Moderately // 70 views

Debian update for lighttpd

6th Oct, 2008

New advisories:	19
New vulnerabilities:	52
Updated advisories:	26

Moderately // 405 views

Serv-U File Renaming Directory Traversal and STOU Denial of Service

Moderately // 388 views

JMweb MP3 Script "src" File Inclusion Vulnerabilities

Less // 350 views

AmpJuke "special" SQL Injection Vulnerability

Less // 370 views

Website Directory "keyword" Cross-Site Scripting Vulnerability

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.