Summary
This host is installed with McAfee VirusScan Enterprise and is prone to untrusted search path vulnerability.
Impact
Successful exploitation will allow attackers to execute arbitrary code via a crafted document embedded with ActiveX control.
Impact Level: System/Application
Solution
Apply HF669863 patch for version 8.5i or
Upgrade to version 8.7i or later,
For updates refer to http://www.mcafee.com
Insight
Flaw is due to loading dynamic-link libraries (DLL) from an untrusted path.
Affected
McAfee VirusScan Enterprise versions prior to 8.7i
References
Updated on 2017-03-28
Severity
Classification
-
CVE CVE-2009-5118 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities