CVE-2006-3961
Estado: ModificadaMedia (6.8)—
Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute arbitrary commands via long string parameters, which are later used in vsprintf.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
- Puntuación base: 6.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 34%
- Percentil entre todas las CVEs puntuadas: 98
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (9)
CWE
- CWE-119
Referencias
- http://secunia.com/advisories/21264
- http://securitytracker.com/id?1016614
- http://ts.mcafeehelp.com/faq3.asp?docid=407052
- http://www.eeye.com/html/research/advisories/AD2006807.html
- http://www.eeye.com/html/research/upcoming/20060719.html
- http://www.kb.cert.org/vuls/id/481212
- http://www.osvdb.org/27698
- http://www.securityfocus.com/archive/1/442495/100/100/threaded
- http://www.securityfocus.com/bid/19265
- http://www.vupen.com/english/advisories/2006/3096
- http://secunia.com/advisories/21264
- http://securitytracker.com/id?1016614
- http://ts.mcafeehelp.com/faq3.asp?docid=407052
- http://www.eeye.com/html/research/advisories/AD2006807.html
- http://www.eeye.com/html/research/upcoming/20060719.html
- http://www.kb.cert.org/vuls/id/481212
- http://www.osvdb.org/27698
- http://www.securityfocus.com/archive/1/442495/100/100/threaded
- http://www.securityfocus.com/bid/19265
- http://www.vupen.com/english/advisories/2006/3096
JSON original (NVD)
Mostrar
{
"id": "CVE-2006-3961",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2006-08-01T21:04:00.000",
"references": [
{
"url": "http://secunia.com/advisories/21264",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1016614",
"source": "cve@mitre.org"
},
{
"url": "http://ts.mcafeehelp.com/faq3.asp?docid=407052",
"source": "cve@mitre.org"
},
{
"url": "http://www.eeye.com/html/research/advisories/AD2006807.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.eeye.com/html/research/upcoming/20060719.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/481212",
"tags": [
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/27698",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/442495/100/100/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/19265",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/3096",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/21264",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1016614",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://ts.mcafeehelp.com/faq3.asp?docid=407052",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.eeye.com/html/research/advisories/AD2006807.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.eeye.com/html/research/upcoming/20060719.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/481212",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/27698",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/442495/100/100/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/19265",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2006/3096",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute arbitrary commands via long string parameters, which are later used in vsprintf."
},
{
"lang": "es",
"value": "Desbordamiento de búfer en control ActiveX McSubMgr (mcsubmgr.dll) en McAfee Security Center 6.0.23 para Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, y QuickClean permite a atacantes con la intervención del usuario ejecutar comandos de su elección a través de paráametros string, los cuales son posteriormente usados en vsprintf."
}
],
"lastModified": "2026-06-16T22:28:09.717",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mcafee:antispyware:2005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B862ADF2-A544-4729-9EE4-D140C58D6AEB"
},
{
"criteria": "cpe:2.3:a:mcafee:antispyware:2006:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5350EE37-53D7-4DFB-84FC-0FA6A7C1C123"
},
{
"criteria": "cpe:2.3:a:mcafee:internet_security_suite:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB0A7659-25FF-4E18-B2BA-34F6FD6410F6"
},
{
"criteria": "cpe:2.3:a:mcafee:internet_security_suite:2005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C22BB62-9790-4D89-B1B4-D5E0F4FFB3C5"
},
{
"criteria": "cpe:2.3:a:mcafee:internet_security_suite:2006:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E69BB96-F48B-43DA-BA7B-530E5148CCC0"
},
{
"criteria": "cpe:2.3:a:mcafee:personal_firewall_plus:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F3E0836-557F-46C8-BBDE-955D3AEBB6B3"
},
{
"criteria": "cpe:2.3:a:mcafee:personal_firewall_plus:2005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F62AF06-16DD-4C6C-BD48-BFA08629739C"
},
{
"criteria": "cpe:2.3:a:mcafee:personal_firewall_plus:2006:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "134C4C4F-92A0-4B89-B06A-4FB8D9513AFE"
},
{
"criteria": "cpe:2.3:a:mcafee:privacy_service:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F945365-B065-44A6-8CEC-2CBCE4DD23C4"
},
{
"criteria": "cpe:2.3:a:mcafee:privacy_service:2005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB1AC389-8BBF-4784-ABCD-99E379AC6B75"
},
{
"criteria": "cpe:2.3:a:mcafee:privacy_service:2006:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E03296D-5FC1-450D-BC05-6F6E9A90CF77"
},
{
"criteria": "cpe:2.3:a:mcafee:quickclean:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "931427A2-B69B-4418-8374-854A5F9420DE"
},
{
"criteria": "cpe:2.3:a:mcafee:quickclean:2005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E19A9E38-E637-487A-BC06-F0CA6481E7EB"
},
{
"criteria": "cpe:2.3:a:mcafee:quickclean:2006:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE3B1863-DBB3-4458-899B-CEEAD9275B17"
},
{
"criteria": "cpe:2.3:a:mcafee:security_center:4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD547C9C-9D50-49ED-8EFE-1DD7484DDED5"
},
{
"criteria": "cpe:2.3:a:mcafee:security_center:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "210F5447-4FC7-4278-9F2A-C64BBB5A86DD"
},
{
"criteria": "cpe:2.3:a:mcafee:security_center:6.0.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BECBD40D-ACBD-4E88-B230-ECFE98FD9F5D"
},
{
"criteria": "cpe:2.3:a:mcafee:security_center:6.0.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A82098C7-30FE-464E-891F-868A0209D9DB"
},
{
"criteria": "cpe:2.3:a:mcafee:spamkiller:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0652B16C-7D9A-4743-AB54-6F205CA1E76D"
},
{
"criteria": "cpe:2.3:a:mcafee:spamkiller:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CBC8F91-2534-4DAC-BDE3-AE49E19A6A8E"
},
{
"criteria": "cpe:2.3:a:mcafee:spamkiller:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B33F2AC-4BBE-4DE0-A61E-378972011BB0"
},
{
"criteria": "cpe:2.3:a:mcafee:virusscan:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D9B7B07-E3EF-4185-927C-CE308829B9A1"
},
{
"criteria": "cpe:2.3:a:mcafee:virusscan:2005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F58D6A2F-AC08-4C1D-9ABF-4D675A1E87AC"
},
{
"criteria": "cpe:2.3:a:mcafee:virusscan:2006:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E96246D-3184-4BBB-8675-9B1CBE0B977C"
},
{
"criteria": "cpe:2.3:a:mcafee:wireless_home_network_security:2006:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B3DC47F-853B-44B0-BD8B-C2EE4530B333"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}