CVE-2006-3961

Published: Aug 1, 2006Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute arbitrary commands via long string parameters, which are later used in vsprintf.

Affected (25)

Products: Mcafee: Antispyware, Internet Security Suite, Personal Firewall Plus, Privacy Service, Quickclean, Security Center, Spamkiller, Virusscan, Wireless Home Network Security

9 products

Internet Security Suite

Personal Firewall Plus

Privacy Service

Security Center

Wireless Home Network Security

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Mcafee Antispyware	Version 2005
Mcafee Antispyware	Version 2006
Mcafee Internet Security Suite	Version 2004
Mcafee Internet Security Suite	Version 2005
Mcafee Internet Security Suite	Version 2006
Mcafee Personal Firewall Plus	Version 2004
Mcafee Personal Firewall Plus	Version 2005
Mcafee Personal Firewall Plus	Version 2006
Mcafee Privacy Service	Version 2004
Mcafee Privacy Service	Version 2005
Mcafee Privacy Service	Version 2006
Mcafee Quickclean	Version 2004
Mcafee Quickclean	Version 2005
Mcafee Quickclean	Version 2006
Mcafee Security Center	Version 4.3
Mcafee Security Center	Version 6.0.22
Mcafee Security Center	Version 6.0.23
Mcafee Security Center	Version 6.0
Mcafee Spamkiller	Version 5.0
Mcafee Spamkiller	Version 6.0
Mcafee Spamkiller	Version 7.0
Mcafee Virusscan	Version 2004
Mcafee Virusscan	Version 2005
Mcafee Virusscan	Version 2006
Mcafee Wireless Home Network Security	Version 2006

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (20)

http://secunia.com/advisories/21264

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1016614

Source: cve@mitre.org

http://ts.mcafeehelp.com/faq3.asp?docid=407052

Source: cve@mitre.org

http://www.eeye.com/html/research/advisories/AD2006807.html

Source: cve@mitre.org

http://www.eeye.com/html/research/upcoming/20060719.html

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/481212

Source: cve@mitre.org

US Government Resource

http://www.osvdb.org/27698

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/442495/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19265

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/3096

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21264

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://securitytracker.com/id?1016614

Source: af854a3a-2127-422b-91ae-364da2661108

http://ts.mcafeehelp.com/faq3.asp?docid=407052

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.eeye.com/html/research/advisories/AD2006807.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.eeye.com/html/research/upcoming/20060719.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/481212

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.osvdb.org/27698

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/442495/100/100/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19265

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2006/3096

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.