CVE

Id
50919  
CVE No.
CVE-2011-3007  
Status
Candidate  
Description
The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing arbitrary code using the MyCioScan.Scan.Start method.  
Phase
Assigned (20110802)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
549459 50919 CVE-2011-3007 MISC:http://dvlabs.tippingpoint.com/advisory/TPTI-11-13  View
549460 50919 CVE-2011-3007 CONFIRM:https://kc.mcafee.com/corporate/index?page=content&id=SB10016  View
549461 50919 CVE-2011-3007 OSVDB:74513  View
549462 50919 CVE-2011-3007 URL:http://osvdb.org/74513  View
549463 50919 CVE-2011-3007 XF:mcafee-saas-mycioscn-code-execution(69093)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34605 JVNDB-2011-004847 World of Padman などの製品で使用される ioQuake3 エンジンにおける任意のコードを実行される脆弱性 World of Padman、Tremulous および ioUrbanTerror で使用される ioQuake3 エンジンは、quake3 ディレクトリに書き込む前に危険なファイルの拡張子をチェックしないため、任意のコードを実行される脆弱性が存在します。 CVE-2011-3012 50919 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004847.html  View