Secunia

A vulnerability has been reported in various McAfee products, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error within the SecurityCenter Subscription Manager ActiveX control (McSubMgr.dll) when handling the "IsOldAppInstalled()" method. This can be exploited to cause a buffer overflow via a specially crafted argument passed to the said method.

Successful exploitation allows execution of arbitrary code when a user visits a malicious website.

The vulnerability affects versions prior to 7.2.147 and 6.0.25.

Solution
The fix has reportedly been available via automatic updates since March 22, 2007.
Further details available in Customer Area

Provided and/or discovered by
Discovered by Peter Vreugdenhil and reported via iDefense Labs.

Changelog
Further details available in Customer Area

Original Advisory
McAfee:
http://ts.mcafeehelp.com/faq3.asp?docid=419189

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area