CVE-2007-2152

Published: Apr 19, 2007Modified: Apr 23, 2026

7.9

Vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 5.5 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execute arbitrary code via a long filename containing multi-byte (Unicode) characters.

Affected (1)

Products: Mcafee: Virusscan Enterprise

Mcafee

1 product

Virusscan Enterprise

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mcafee Virusscan Enterprise	Up to 8.0i

References (16)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=515

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/24914

Source: cve@mitre.org

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/324929

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/bid/23543

Source: cve@mitre.org

http://www.securitytracker.com/id?1017928

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2007/1435

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33732

Source: cve@mitre.org

https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=612750&command=show&forward=nonthreadedKC

Source: cve@mitre.org

PatchVendor Advisory

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=515