Unscored CVE-2004-0831 EUVD-2004-0829GHSA-pg82-c36h-f4rc

McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the Sy…

Published Sep 24, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges.

References

mcafee-virusscan-gain-privileges(17367) vdb-entry
20040914 McAfee VirusScan Privilege Escalation Vulnerability third-party-advisory
20040915 McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE] mailing-list