Description
McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs.
References
- 20021129 Potential Vuln in McAfee VirusScan 451 mailing-list
- virusscan-webscanx-dll-execution(10741) vdb-entry
- 6288 vdb-entry