CVE-2007-1226

McAfee VirusScan for Mac (Virex) before 7.7 patch 1 has weak permissions (0666) for /Library/Application Support/Virex/VShieldExclude.txt, which allows local users to reconfigure Virex to skip scanning of arbitrary files.

CVSS v2.0 NVD

4.1 MEDIUMAV:L/AC:M/Au:S/C:P/I:P/A:P

EPSS

0.37% chance of exploitation in the next 30 days, 29th percentile

Published

2007-03-02

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/461485/100/0/threaded

Security advisories

• http://secunia.com/advisories/24337
• https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=518722&sliceId=SAL_Publi…
• http://www.securityfocus.com/bid/22744

References

• CVE Record
• NVD entry