CVE-2012-4598
Published Aug 22, 2012
Last updated 12 years ago
Overview
- Description
- An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mcafee:mcafee_virtual_technician:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58A2B0DD-D1D8-4273-8846-4048E809E4CE",
"versionEndIncluding": "6.3.0.1911"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mcafee:epo_mcafee_virtual_technician:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "111AE55F-EA4A-4E7B-BEAE-0F6F1FD36EEB",
"versionEndIncluding": "1.0.7"
},
{
"criteria": "cpe:2.3:a:mcafee:epo_mcafee_virtual_technician:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "824EC318-D0DC-4D4F-9F30-032BAC76C379"
},
{
"criteria": "cpe:2.3:a:mcafee:epo_mcafee_virtual_technician:1.0.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6316A9A-7DB9-4415-ACCA-B9816AB9F4DD"
}
],
"operator": "OR"
}
]
}
]