CVE-2010-3496: mcafee virusscan_enterprise

Vulnerability summary

CVE-2010-3496 is a medium (CVSS 6.4) vulnerability in mcafee virusscan_enterprise. EPSS estimates a 4.43% chance of exploitation in the next 30 days, higher than 91.3% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 22-08-2012
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

McAfee VirusScan Enterprise 8.5i and 8.7i does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution.

• CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.