CVE-2006-3961

medium · 6.8

Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute arbitrary commands via long string parameters, which are later used in vsprintf.

6.8

CVSS

34.4%

EPSS (exploit prob.)

98th

EPSS percentile

2006-08-01

Published

AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
mcafee	antispyware	2005
mcafee	antispyware	2006
mcafee	internet_security_suite	2004
mcafee	internet_security_suite	2005
mcafee	internet_security_suite	2006
mcafee	personal_firewall_plus	2004
mcafee	personal_firewall_plus	2005
mcafee	personal_firewall_plus	2006
mcafee	privacy_service	2004
mcafee	privacy_service	2005
mcafee	privacy_service	2006
mcafee	quickclean	2004
mcafee	quickclean	2005
mcafee	quickclean	2006
mcafee	security_center	4.3
mcafee	security_center	6.0
mcafee	security_center	6.0.22
mcafee	security_center	6.0.23
mcafee	spamkiller	5.0
mcafee	spamkiller	6.0
mcafee	spamkiller	7.0
mcafee	virusscan	2004
mcafee	virusscan	2005
mcafee	virusscan	2006
mcafee	wireless_home_network_security	2006

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-3961