Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

McAfee Virus Scan Enterprise - Insecure Library Loading Vulnerability

Secunia has rated this newly discovered risk as Highly Critical.  McAfee will most likely address this concern quickly for the Enterprise version 8 family of products. 

McAfee Virus Scan Enterprise - Insecure Library Loading Vulnerability
http://secunia.com/advisories/41482

QUOTE: The vulnerability is caused due to the application loading libraries (e.g. traceapp.dll) in an insecure manner. This can be exploited to load arbitrary libraries by tricking a user into opening a Word Document with an embedded ActiveX control located on a remote WebDAV or SMB share in Microsoft Office 2003.