CVE-2011-3007 | BDVDB-2026-46974 Detail

Description#

The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing arbitrary code using the MyCioScan.Scan.Start method.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://kc.mcafee.com/corporate/index?page=content&id=SB10016
https://exchange.xforce.ibmcloud.com/vulnerabilities/69093
http://osvdb.org/74513
http://dvlabs.tippingpoint.com/advisory/TPTI-11-13

Exploit#

No public exploit known

History#

Version 12011-08-10Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.