What’s Vulnerable › Vulnerabilities

CVE-2006-3961

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 34.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-08-01 · updated 2026-06-16
• Weakness: CWE-119

Description

Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute arbitrary commands via long string parameters, which are later used in vsprintf.

Affected products

• McAfee Antispyware: 2005, 2006
• McAfee Internet Security Suite: 2004, 2005, 2006
• McAfee Personal Firewall Plus: 2004, 2005, 2006
• McAfee Privacy Service: 2004, 2005, 2006
• McAfee Quickclean: 2004, 2005, 2006
• McAfee Security Center: 4.3, 6.0, 6.0.22, 6.0.23
• McAfee Spamkiller: 5.0, 6.0, 7.0
• McAfee Virusscan: 2004, 2005, 2006
• McAfee Wireless Home Network Security: 2006

References

• http://secunia.com/advisories/21264
• http://securitytracker.com/id?1016614
• http://ts.mcafeehelp.com/faq3.asp?docid=407052
• http://www.eeye.com/html/research/advisories/AD2006807.html
• http://www.eeye.com/html/research/upcoming/20060719.html
• http://www.kb.cert.org/vuls/id/481212
• http://www.osvdb.org/27698
• http://www.securityfocus.com/archive/1/442495/100/100/threaded
• http://www.securityfocus.com/bid/19265
• http://www.vupen.com/english/advisories/2006/3096
• http://secunia.com/advisories/21264
• http://securitytracker.com/id?1016614

Get alerted when CVE-2006-3961 or the next vulnerability affects your stack