Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
McAfee VirusScan WebScanX代码执行漏洞
Vulnerability Description
McAfee VirusScan's WebScanX组件用于钩挂到Microsoft Windows系统的explorer.exe程序中,当explorer用于浏览目录(本地或网络),并且用户HOME目录位于网络共享上,WebScanX会从用户HOME目录中调用多个.dll文件。 WebScanX组件装载.dll文件时缺少正确检查,远程攻击者可以利用这个漏洞提供恶意dll文件供WebScanX装载,而以高权限执行带有恶意代码的DLL文件。 当打开浏览器浏览共享网络中的用户目录时,WebScanX会尝试从
CVSS Information
N/A
Vulnerability Type
N/A