CVE-2007-2584

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 9.7%

from disclosure to weapon1 days

Published on NVDMay 9

1st PoC+1d

exploitation probability

9.7%top 5% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/3893

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528 http://osvdb.org/35874 http://secunia.com/advisories/25173 https://exchange.xforce.ibmcloud.com/vulnerabilities/34179 http://ts.mcafeehelp.com/faq3.asp?docid=419189 http://www.securityfocus.com/bid/23888 http://www.securityfocus.com/bid/23909 http://www.securitytracker.com/id?1018028 http://www.vupen.com/english/advisories/2007/1717