CVEvulnerability

CVE-2007-1498

9.3 HIGH Published 2007-03-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-03-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) in the ePO management console in McAfee ePolicy Orchestrator (ePO) before 3.6.1 Patch 1 and ProtectionPilot (PRP) before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument to the (1) ExportSiteList and (2) VerifyPackageCatalog functions, and (3) unspecified vectors involving a swprintf function call.

Affected configurations

• mcafee epolicy orchestrator 3.5.0 • mcafee epolicy orchestrator 3.6.0 • mcafee epolicy orchestrator 3.6.1 • mcafee protectionpilot 1.1.1 • mcafee protectionpilot 1.5.0

References