Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2004-1908

Overview

Vulnerability Score 5.0 5.0
CVE Id CVE-2004-1908
Last Modified 05 Sep 2008 04:42:40
Published 31 Dec 2004 12:00:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact NONE NONE
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2004-1908

Summary

McFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain sensitive information via the GetSpecialFolderLocation function with certain parameters.

Vulnerable Systems

Application

  • Mcafee Freescan


References

XF - freescan-mcfscan-info-disclosure(15782)

BID - 10077

SECUNIA - 11313

BUGTRAQ - 20040407 McAfee Freescan ActiveX Information Disclosure [Additional Details & PoC]

BUGTRAQ - 20040407 Mcafee FreeScan - Remote Buffer Overflow and Private Information Disclosure

FULLDISC - 20040407 Symantec, McAfee and Panda ActiveX controls


Last Updated: 27 May 2016 10:39:14