CVEvulnerability

CVE-2006-3961

6.8 MEDIUM Published 2006-08-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-08-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute arbitrary commands via long string parameters, which are later used in vsprintf.

Affected configurations

• mcafee antispyware 2005 • mcafee antispyware 2006 • mcafee internet security suite 2004 • mcafee internet security suite 2005 • mcafee internet security suite 2006 • mcafee personal firewall plus 2004 • mcafee personal firewall plus 2005 • mcafee personal firewall plus 2006 • mcafee privacy service 2004 • mcafee privacy service 2005 • mcafee privacy service 2006 • mcafee quickclean 2004 • mcafee quickclean 2005 • mcafee quickclean 2006 • mcafee security center 4.3 • mcafee security center 6.0 • mcafee security center 6.0.22 • mcafee security center 6.0.23 • mcafee spamkiller 5.0 • mcafee spamkiller 6.0 • mcafee spamkiller 7.0 • mcafee virusscan 2004 • mcafee virusscan 2005 • mcafee virusscan 2006 • mcafee wireless home network security 2006

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References