Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

McAfee VirusScan Path Specification Local Privilege Escalation Vulnerability

McAfee VirusScan is prone to a vulnerability that could allow an arbitrary file to be executed.

The 'naPrdMgr.exe' process calls applications without using properly quoted paths. Successful exploitation may allow local attackers to gain elevated privileges.

McAfee VirusScan Enterprise 8.0i (patch 11) is reportedly vulnerable. Other versions may be affected as well.







 

Privacy Statement
Copyright 2009, SecurityFocus