CVEvulnerability
CVE-2006-3961
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-08-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute arbitrary commands via long string parameters, which are later used in vsprintf.
Affected configurations
• mcafee antispyware 2005
• mcafee antispyware 2006
• mcafee internet security suite 2004
• mcafee internet security suite 2005
• mcafee internet security suite 2006
• mcafee personal firewall plus 2004
• mcafee personal firewall plus 2005
• mcafee personal firewall plus 2006
• mcafee privacy service 2004
• mcafee privacy service 2005
• mcafee privacy service 2006
• mcafee quickclean 2004
• mcafee quickclean 2005
• mcafee quickclean 2006
• mcafee security center 4.3
• mcafee security center 6.0
• mcafee security center 6.0.22
• mcafee security center 6.0.23
• mcafee spamkiller 5.0
• mcafee spamkiller 6.0
• mcafee spamkiller 7.0
• mcafee virusscan 2004
• mcafee virusscan 2005
• mcafee virusscan 2006
• mcafee wireless home network security 2006
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/21264 Patch, Vendor Advisory
- http://securitytracker.com/id?1016614 securitytracker.com
- http://ts.mcafeehelp.com/faq3.asp?docid=407052 ts.mcafeehelp.com
- http://www.eeye.com/html/research/advisories/AD2006807.html www.eeye.com
- http://www.eeye.com/html/research/upcoming/20060719.html www.eeye.com
- http://www.kb.cert.org/vuls/id/481212 US Government Resource
- http://www.osvdb.org/27698 www.osvdb.org
- http://www.securityfocus.com/archive/1/442495/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19265 Patch
- http://www.vupen.com/english/advisories/2006/3096 Vendor Advisory
- http://secunia.com/advisories/21264 Patch, Vendor Advisory
- http://securitytracker.com/id?1016614 securitytracker.com
- http://ts.mcafeehelp.com/faq3.asp?docid=407052 ts.mcafeehelp.com
- http://www.eeye.com/html/research/advisories/AD2006807.html www.eeye.com
- http://www.eeye.com/html/research/upcoming/20060719.html www.eeye.com
- http://www.kb.cert.org/vuls/id/481212 US Government Resource
- http://www.osvdb.org/27698 www.osvdb.org
- http://www.securityfocus.com/archive/1/442495/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19265 Patch
- http://www.vupen.com/english/advisories/2006/3096 Vendor Advisory