Buffer Overflow in McAfee Security Center ActiveX Control

CVE-2006-3961

Summary

A buffer overflow vulnerability exists in the McSubMgr ActiveX control (mcsubmgr.dll) of McAfee Security Center 6.0.23. This flaw enables remote, user-assisted attackers to execute arbitrary commands by sending specially crafted long string parameters that are subsequently handled by the vsprintf function. Such exploitation necessitates user interaction, thereby allowing potential malicious actions that compromise system integrity.

References