vulnwire
10.0crit

CVE-2007-25841 exploit

Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee Se…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
9.7%
percentile 96%
Public exploits
1
Exploit-DB

Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument.

Exploit prediction (EPSS)

9.74% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

Exploits and detections

  • EDB-3893 McAfee Security Center IsOldAppInstalled - ActiveX Buffer Overflow · remote · 2007-05-10

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • securitytracker.com /id?1018028 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • securityfocus.com /bid/23888 · vdb-entry, x_refsource_BID, x_transferred
  • labs.idefense.com /intelligence/vulnerabilities/display.php?id=528 · third-party-advisory, x_refsource_IDEFENSE, x_transferred
  • osvdb.org /35874 · vdb-entry, x_refsource_OSVDB, x_transferred
  • secunia.com /advisories/25173 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2007/1717 · vdb-entry, x_refsource_VUPEN, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/34179 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/23909 · vdb-entry, x_refsource_BID, x_transferred
  • ts.mcafeehelp.com /faq3.asp?docid=419189 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.