Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows local users to gain privileges via a Trojan horse DLL in an unspecified directory, as demonstrated by scanning a document located on a remote share.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Virusscan_enterprise | Mcafee | * | 8.5i (including) |
| Virusscan_enterprise | Mcafee | 8.0i (including) | 8.0i (including) |
| Virusscan_enterprise | Mcafee | 8.0i-p11 (including) | 8.0i-p11 (including) |