McAfee Personal Firewall Plus vulnerabilities

2 CVEs affecting McAfee Personal Firewall Plus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-5417, published 2006-10-20.

More from McAfee.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-3961, published 2006-08-01. Medium severity, CVSS 6.8. EPSS: 34.4% chance of exploitation in the next 30 days. Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan,…
• CVE-2006-5417, published 2006-10-20. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. McAfee Network Agent (mcnasvc.exe) 1.0.178.0, as used by multiple McAfee products possibly including Internet Security Suite, Personal Firewall Plus, and VirusScan, allows remote attackers to cause a…