Unscored severity · published Aug 1, 2006
CVE-2006-3961
Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall…
–
CVSS
34.4%
EPSS
No
On KEV
Description
Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute arbitrary commands via long string parameters, which are later used in vsprintf.
Exploitation
Is it being used?
Exploit prediction (EPSS)34.4% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Antispyware · Mcafee
2005; 2006 · source: NVD
IS
Internet Security Suite · Mcafee
2004; 2005; 2006 · source: NVD
PF
Personal Firewall Plus · Mcafee
2004; 2005; 2006 · source: NVD
PS
Privacy Service · Mcafee
2004; 2005; 2006 · source: NVD
QU
Quickclean · Mcafee
2004; 2005; 2006 · source: NVD
SC
Security Center · Mcafee
4.3; 6.0; 6.0.22; 6.0.23 · source: NVD
SP
Spamkiller · Mcafee
5.0; 6.0; 7.0 · source: NVD
VI
Virusscan · Mcafee
2004; 2005; 2006 · source: NVD
WH
Wireless Home Network Security · Mcafee
2006 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3961
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3961
Patch
http://secunia.com/advisories/21264
securitytracker.com
http://securitytracker.com/id?1016614
ts.mcafeehelp.com
http://ts.mcafeehelp.com/faq3.asp?docid=407052
www.eeye.com
http://www.eeye.com/html/research/advisories/AD2006807.html
www.eeye.com
http://www.eeye.com/html/research/upcoming/20060719.html
US Government Resource
http://www.kb.cert.org/vuls/id/481212