CVE

Id
31972  
CVE No.
CVE-2008-1855  
Status
Candidate  
Description
FrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator (ePO) and ProtectionPilot (PrP), allows remote attackers to corrupt memory and cause a denial of service (CMA Framework service crash) via a long invalid method in requests for the /spin//AVClient//AVClient.csp URI, a different vulnerability than CVE-2006-5274.  
Phase
Assigned (20080416)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
344942 31972 CVE-2008-1855 MILW0RM:5343  View
344943 31972 CVE-2008-1855 URL:http://www.milw0rm.com/exploits/5343  View
344944 31972 CVE-2008-1855 MISC:http://www.offensive-security.com/0day/mcafee_again.py.txt  View
344945 31972 CVE-2008-1855 CONFIRM:https://knowledge.mcafee.com/article/219/615324_f.SAL_Public.html  View
344946 31972 CVE-2008-1855 BID:28573  View
344947 31972 CVE-2008-1855 URL:http://www.securityfocus.com/bid/28573  View
344948 31972 CVE-2008-1855 VUPEN:ADV-2008-1122  View
344949 31972 CVE-2008-1855 URL:http://www.vupen.com/english/advisories/2008/1122/references  View
344950 31972 CVE-2008-1855 SECTRACK:1019794  View
344951 31972 CVE-2008-1855 URL:http://www.securitytracker.com/id?1019794  View
344952 31972 CVE-2008-1855 SECUNIA:29637  View
344953 31972 CVE-2008-1855 URL:http://secunia.com/advisories/29637  View
344954 31972 CVE-2008-1855 XF:mcafee-cma-frameworkservice-dos(41597)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49047 JVNDB-2008-004357 iScripts SocialWare の events.php における SQL インジェクションの脆弱性 iScripts SocialWare の events.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-1859 31972 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004357.html  View