CVEvulnerability
CVE-2004-0831
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-09-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges.
Affected configurations
• mcafee virusscan 4.5
• mcafee virusscan 4.5.1
References
- http://marc.info/?l=bugtraq&m=109526269429728&w=2 marc.info
- http://www.idefense.com/application/poi/display?id=140&type=vulnerabilities Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17367 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=109526269429728&w=2 marc.info
- http://www.idefense.com/application/poi/display?id=140&type=vulnerabilities Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17367 exchange.xforce.ibmcloud.com