Buffer Overflow in McAfee VirusScan Enterprise Affects On-Access Scanner

CVE-2007-2152

Summary

A buffer overflow vulnerability exists in McAfee VirusScan Enterprise's On-Access Scanner. This issue can be exploited by remote attackers who can craft a long filename containing multi-byte (Unicode) characters. When the On-Access Scanner processes this maliciously constructed filename, it can lead to arbitrary code execution on the affected system. Users are encouraged to apply the latest patches to mitigate the risk associated with this vulnerability.

References