CVE-2012-5879: McAfee Epo McAfee Virtual Technician
High severity, CVSS 8.2. EPSS: 5.2% chance of exploitation in the next 30 days.
An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method.
Affected products
- McAfee Epo McAfee Virtual Technician: up to and including 6.5.0.2101; version 1.0 only; version 1.0.4.0 only; version 1.0.7 only; version 1.0.8 only; version 1.0.9 only
- McAfee McAfee Virtual Technician: up to and including 6.5.0.2101; version 6.3.0.1911 only
Published 2013-03-28. Last modified 2026-06-16.