VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 10, 2011· Updated Jun 16, 2026

CVE-2011-3006

CVE-2011-3006

Description

The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to bypass the MyASUtil.SecureObjectFactory.CreateSecureObject domain execution policy using a cross-site scripting (XSS) attack, execute arbitrary code using the MyASUtil.InstallInfo.RunUserProgram function, and possibly conduct other unspecified attacks.

Affected products

2
  • McAfee/SaaS Endpoint Protection2 versions
    cpe:2.3:a:mcafee:saas_endpoint_protection:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mcafee:saas_endpoint_protection:*:*:*:*:*:*:*:*range: <=5.2.1
    • (no CPE)range: <=5.2.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.