Unscored severity · published Aug 10, 2011
CVE-2011-3006
The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to bypass the…
–
CVSS
2.1%
EPSS
No
On KEV
Description
The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to bypass the MyASUtil.SecureObjectFactory.CreateSecureObject domain execution policy using a cross-site scripting (XSS) attack, execute arbitrary code using the MyASUtil.InstallInfo.RunUserProgram function, and possibly conduct other unspecified attacks.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Saas Endpoint Protection · Mcafee
through 5.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3006
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3006
dvlabs.tippingpoint.com
http://dvlabs.tippingpoint.com/advisory/TPTI-11-12
osvdb.org
http://osvdb.org/74512
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/69094
Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10016
More from Saas Endpoint Protection
–
CVE-2011-5101
The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam
–
CVE-2011-3007
The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary…