CVE-2007-1226

McAfee VirusScan for Mac (Virex) before 7.7 patch 1 has weak permissions (0666) for /Library/Application Support/Virex/VShieldExclude.txt, which allows local users to reconfigure Virex to skip scanning of arbitrary files.

CVSS v2.0

4.1 MEDIUMAV:L/AC:M/Au:S/C:P/I:P/A:P

EPSS

0.36% chance of exploitation in the next 30 days, 28th percentile

Published

2007-03-02

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/461485/100/0/threaded

References

• CVE Record
• NVD entry

Related

• CVE-2007-1225
• CVE-2007-1227
• CVE-2007-1224
• CVE-2007-1229
• CVE-2007-1219
• CVE-2007-1230