« Volver al listado

CVE-2007-2584

Estado: ModificadaAlta (10)—

Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Mcafee — Security CenterMcafee — Securitycenter AgentMcafee — Virusscan

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-2584",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-05-10T00:19:00.000",
  "references": [
    {
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/35874",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/25173",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://ts.mcafeehelp.com/faq3.asp?docid=419189",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/23888",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/23909",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1018028",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/1717",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34179",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/35874",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/25173",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://ts.mcafeehelp.com/faq3.asp?docid=419189",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/23888",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/23909",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1018028",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/1717",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34179",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en la función IsOldAppInstalled del control ActiveX McSubMgr.McSubMgr Subscription Manager (MCSUBMGR.DLL) en McAfee SecurityCenter anterior a 6.0.25 y 7.x anterior a 7.2.147 permite a atacantes remotos ejecutar código de su elección mediante un argumento manipulado."
    }
  ],
  "lastModified": "2026-06-16T22:39:53.167",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mcafee:security_center:4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD547C9C-9D50-49ED-8EFE-1DD7484DDED5"
            },
            {
              "criteria": "cpe:2.3:a:mcafee:security_center:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "210F5447-4FC7-4278-9F2A-C64BBB5A86DD"
            },
            {
              "criteria": "cpe:2.3:a:mcafee:security_center:6.0.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BECBD40D-ACBD-4E88-B230-ECFE98FD9F5D"
            },
            {
              "criteria": "cpe:2.3:a:mcafee:security_center:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E42B079-DC23-43AC-9437-62B97C88EF3C"
            },
            {
              "criteria": "cpe:2.3:a:mcafee:security_center:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "449EAAD6-C4B6-4EC9-9059-1D447C1D60F5"
            },
            {
              "criteria": "cpe:2.3:a:mcafee:security_center:7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D27864F9-A378-4690-9C17-C3B6A55135F7"
            },
            {
              "criteria": "cpe:2.3:a:mcafee:securitycenter_agent:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC64577D-EFD8-4D30-B95A-D26075CFD063"
            },
            {
              "criteria": "cpe:2.3:a:mcafee:virusscan:10.0.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8CC6DF56-10C0-4682-B466-EBBC3640DCE4"
            },
            {
              "criteria": "cpe:2.3:a:mcafee:virusscan:2004:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D9B7B07-E3EF-4185-927C-CE308829B9A1"
            },
            {
              "criteria": "cpe:2.3:a:mcafee:virusscan:2005:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F58D6A2F-AC08-4C1D-9ABF-4D675A1E87AC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}