CVE-2007-2584

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-05-10 · updated 2026-06-16

Description

Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument.

Affected products

McAfee Security Center: 4.3, 6.0, 6.0.22, 7.0, 7.1, 7.2
McAfee Securitycenter Agent: 6.0
McAfee Virusscan: 10.0.27, 2004, 2005

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528
http://osvdb.org/35874
http://secunia.com/advisories/25173
http://ts.mcafeehelp.com/faq3.asp?docid=419189
http://www.securityfocus.com/bid/23888
http://www.securityfocus.com/bid/23909
http://www.securitytracker.com/id?1018028
http://www.vupen.com/english/advisories/2007/1717
https://exchange.xforce.ibmcloud.com/vulnerabilities/34179
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=528
http://osvdb.org/35874
http://secunia.com/advisories/25173

Get alerted when CVE-2007-2584 or the next vulnerability affects your stack