CVE-2011-3007

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.19%

Published

Aug 10, 2011

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing arbitrary code using the MyCioScan.Scan.Start method.

Weaknesses (CWE)

CWE-94

Affected Products (1)

mcafee · saas_endpoint_protectionvulnerable

References (8)

http://dvlabs.tippingpoint.com/advisory/TPTI-11-13

http://osvdb.org/74513

https://exchange.xforce.ibmcloud.com/vulnerabilities/69093

https://kc.mcafee.com/corporate/index?page=content&id=SB10016

Vendor Advisory

http://dvlabs.tippingpoint.com/advisory/TPTI-11-13

http://osvdb.org/74513

https://exchange.xforce.ibmcloud.com/vulnerabilities/69093

https://kc.mcafee.com/corporate/index?page=content&id=SB10016

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs