CVE-2011-3007

The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by…

published August 10, 2011

CVSS
—
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing arbitrary code using the MyCioScan.Scan.Start method.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01188 · 67.5th percentile
Published
2011-08-10T20:00Z
EPSS history
Timeline
  • 10 AUG 20:00Z
    The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by…
    cvelistv5