McAfee SaaS Endpoint Protection vulnerabilities closed
McAfee is warning customers of security holes in its McAfee SaaS Endpoint Protection product. In an advisory, the company says that an error in the MyASUtil ActiveX control (MyAsUtil5.2.0.603.dll) could be exploited by an attacker to remotely inject and execute arbitrary commands. A second vulnerability in the MyCioScan ActiveX control (myCIOScn.dll) can be used to write arbitrary files in the context of the current user.
The vulnerabilities were first reported to McAfee at the end of January by TippingPoint security researcher Jonathan Andersson. Versions up to and including 5.2.1 are said to be affected.
Version 5.2.2 of McAfee SaaS Endpoint Protection addresses these vulnerabilities. All users are advised to update to the latest version as soon as possible. Users can force an update by right-clicking on the McAfee tray icon and selecting "Update Now".
See also:
- McAfee SaaS MyAsUtil5.2.0.603.dll SecureObjectFactory Instantiation Design Flaw Remote Code Execution Vulnerability, security advisory from TippingPoint.
- McAfee SaaS myCIOScn.dll Scan Method Script Injection Remote Code Execution Vulnerability, security advisory from TippingPoint.
(crve)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
