CVE-2012-5879

EUVD-2012-5757
An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.2 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:C/I:C/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
Affected Products (NVD)
VendorProductVersion
mcafeemcafee_virtual_technician
𝑥
≤ 6.5.0.2101
mcafeemcafee_virtual_technician
6.3.0.1911
mcafeeepo_mcafee_virtual_technician
𝑥
≤ 6.5.0.2101
mcafeeepo_mcafee_virtual_technician
1.0
mcafeeepo_mcafee_virtual_technician
1.0.4.0
mcafeeepo_mcafee_virtual_technician
1.0.7
mcafeeepo_mcafee_virtual_technician
1.0.8
mcafeeepo_mcafee_virtual_technician
1.0.9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2013-03/0143.html
http://osvdb.org/91700
http://www.securityfocus.com/bid/58750
http://www.securitytracker.com/id/1028357
https://kc.mcafee.com/corporate/index?page=content&id=SB10040
https://www.htbridge.com/advisory/HTB23128
http://archives.neohapsis.com/archives/bugtraq/2013-03/0143.html
http://osvdb.org/91700
http://www.securityfocus.com/bid/58750
http://www.securitytracker.com/id/1028357
https://kc.mcafee.com/corporate/index?page=content&id=SB10040
https://www.htbridge.com/advisory/HTB23128