Intrusion PreventionMcAfee.ePolicy.Orchestrator.SiteManager.ActiveX.Buffer.Overflow
Description
The SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll), in the ePO management console in McAfee ePolicy Orchestrator, has multiple stack based buffer overflow vulnerabilities. A remote attacker could execute arbitrary code on a system via a crafted malicious web page.
Affected Products
McAfee ePolicy Orchestrator (ePO) versions 3.x
McAfee ProtectionPilot versions 1.x
Impact
System compromise.
Recommended Actions
Apply patch, available from the Web site.
https://mysupport.mcafee.com/eservice_enu/start.swe
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-11-22 | 15.729 | Name:McAfee. EPolicy. Orchestrator. SiteManager. ActiveX. Buffer. Overflow:McAfee. ePolicy. Orchestrator. SiteManager. ActiveX. Buffer. Overflow |
| ID | 14478 |
| Created | Apr 16, 2007 |
| Updated | Jan 13, 2022 |
| Risk |
|
| CVE ID | CVE-2007-1498 |
| Exploit Prediction Score | 88.79% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |