McAfee Internet Security Suite vulnerabilities

5 CVEs affecting McAfee Internet Security Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-1348, published 2009-04-30.

More from McAfee.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-3961, published 2006-08-01. Medium severity, CVSS 6.8. EPSS: 34.4% chance of exploitation in the next 30 days. Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan,…
• CVE-2009-1348, published 2009-04-30. High severity, CVSS 7.6. EPSS: 2.8% chance of exploitation in the next 30 days. The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email…
• CVE-2006-5417, published 2006-10-20. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. McAfee Network Agent (mcnasvc.exe) 1.0.178.0, as used by multiple McAfee products possibly including Internet Security Suite, Personal Firewall Plus, and VirusScan, allows remote attackers to cause a…
• CVE-2005-3377, published 2005-10-30. Medium severity, CVSS 5.1. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple interpretation error in (1) McAfee Internet Security Suite 7.1.5 version 9.1.08 with the 4.4.00 engine and (2) McAfee Corporate 8.0.0 patch 10 with the 4400 engine allows remote attackers to…
• CVE-2005-1107, published 2005-04-18. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain privileges or disable protection by modifying certain files.