McAfee Virtual Technician vulnerabilities

2 CVEs affecting McAfee Virtual Technician, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-5879, published 2013-03-28.

More from McAfee.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-4598, published 2012-08-22. High severity, CVSS 9.3. EPSS: 29.4% chance of exploitation in the next 30 days. An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via…
• CVE-2012-5879, published 2013-03-28. High severity, CVSS 8.2. EPSS: 5.2% chance of exploitation in the next 30 days. An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument…