CVE-2012-4598

Published: Aug 22, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site.

Affected (4)

Products: Mcafee: Mcafee Virtual Technician, Epo Mcafee Virtual Technician

Mcafee

2 products

Mcafee Virtual Technician

Epo Mcafee Virtual Technician

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mcafee Mcafee Virtual Technician	Up to 6.3.0.1911

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Mcafee Epo Mcafee Virtual Technician	Up to 1.0.7
Mcafee Epo Mcafee Virtual Technician	Version 1.0.4.0
Mcafee Epo Mcafee Virtual Technician	Version 1.0

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10028

Source: cve@mitre.org

Vendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10028

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.