NVD

Id
9703  
Name
CVE-2011-3006  
Description
The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to bypass the MyASUtil.SecureObjectFactory.CreateSecureObject domain execution policy using a cross-site scripting (XSS) attack, execute arbitrary code using the MyASUtil.InstallInfo.RunUserProgram function, and possibly conduct other unspecified attacks.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-08-10  
Modified Date
2011-09-06  
Seq
2011-3006  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
55557 9703 CVE-2011-3006 http://dvlabs.tippingpoint.com/advisory/TPTI-11-12  View
55558 9703 CVE-2011-3006 mcafee-saas-myasutil520603-code-execution(69094)  View
55559 9703 CVE-2011-3006 https://kc.mcafee.com/corporate/index?page=content&id=SB10016  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34602 JVNDB-2011-004844 McAfee の SaaS Endpoint Protection における任意のコードを実行される脆弱性 McAfee SaaS Endpoint Protection の MyAsUtil の MyAsUtil ActiveX コントロールは、クロスサイトスクリプティング攻撃を使用して MyASUtil.SecureObjectFactory.CreateSecureObject のドメインの実行ポリシーを回避される、および MyASUtil.InstallInfo.RunUserProgram 関数を使用して任意のコードを実行される脆弱性が存在します。 CVE-2011-3006 50913 CVE-2011-3006 9703 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004844.html 2011-08-10 2012-03-27 View