McAfee VirusScan Enterprise 8.5i and 8.7i does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2012-08-22 10:42
Updated : 2024-02-04 18:16
NVD link : CVE-2010-3496
Mitre link : CVE-2010-3496
CVE.ORG link : CVE-2010-3496
JSON object : View
Products Affected
mcafee
- virusscan_enterprise
CWE
CWE-264
Permissions, Privileges, and Access Controls