CVE-2012-5879: McAfee Epo McAfee Virtual Technician

High severity, CVSS 8.2. EPSS: 5.2% chance of exploitation in the next 30 days.

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method.

Affected products

  • McAfee Epo McAfee Virtual Technician: up to and including 6.5.0.2101; version 1.0 only; version 1.0.4.0 only; version 1.0.7 only; version 1.0.8 only; version 1.0.9 only
  • McAfee McAfee Virtual Technician: up to and including 6.5.0.2101; version 6.3.0.1911 only

Published 2013-03-28. Last modified 2026-06-16.