Unrated severityNVD Advisory· Published Dec 23, 2005· Updated Apr 16, 2026
CVE-2005-4505
CVE-2005-4505
Description
Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run by naPrdMgr.exe when it attempts to execute EntVUtil.EXE under an unquoted "Program Files" path.
Affected products
2- cpe:2.3:a:mcafee:common_management_agent:3.5:p5:*:*:*:*:*:*
- cpe:2.3:a:mcafee:virusscan_enterprise:8.0i:p11:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- www.securityfocus.com/archive/1/420104/100/0/threadednvdExploitVendor Advisory
- www.securityfocus.com/bid/16040nvdExploit
- reedarvin.thearvins.com/20051222-01.htmlnvd
- securityreason.com/securityalert/292nvd
- securitytracker.com/idnvd
- www.vupen.com/english/advisories/2005/3077nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/23815nvd
News mentions
0No linked articles in our index yet.