CVE-2005-4505

Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA...

7.2 HighPublic exploit

Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run by naPrdMgr.exe when it attempts to execute EntVUtil.EXE under an unquoted "Program Files" path.

Exploit likelihood

0.99%Down 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

Record: CVE-2005-4505
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-4505
Updated: 2026-11-02

EUVDEUVD-2005-4500 No score

Record: EUVD-2005-4500
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jx59-j4wf-4x4h No score

Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA...

Record: GHSA-jx59-j4wf-4x4h
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	McAfee VirusScan 8.0 - Path Specification Privilege Escalation	2005-12-22

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-4505 is a high vulnerability (CVSS 7.2) in Mcafee Virusscan Enterprise, published December 23, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.99%, the 62nd percentile. No source names a fixed version.