CVE-2012-4598

high · 9.3

An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site.

9.3

CVSS

29.4%

EPSS (exploit prob.)

98th

EPSS percentile

2012-08-22

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
mcafee	mcafee_virtual_technician	<= 6.3.0.1911
mcafee	epo_mcafee_virtual_technician	<= 1.0.7
mcafee	epo_mcafee_virtual_technician	1.0
mcafee	epo_mcafee_virtual_technician	1.0.4.0

Check a specific version with /api/v1/cve/match.

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10028
https://kc.mcafee.com/corporate/index?page=content&id=SB10028

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-4598