CVE-2004-0831

high Trellix
CVSS v3 Base Score
7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
0.1%
Exploitation probability in 30 days
Top 85% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: September 14, 2004 (7912 days ago)
Last Modified: April 16, 2026
Vendor: Trellix
Source: NVD

Description

McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges.

CWE

NVD-CWE-Other

Affected Products

mcafee virusscan

References

🔗 marc.info 🔗 www.idefense.com 🔗 exchange.xforce.ibmcloud.com 🔗 marc.info 🔗 www.idefense.com