Every CVE Search/ Get API key

CVE-2012-5879

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101...

8.2 HighPublic exploit

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method.

Exploit likelihood

5.20%Down 3.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 8.2

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method.

Record
CVE-2012-5879
CVSS 2.0
8.2 HighAV:N/AC:M/Au:S/C:C/I:C/A:P
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method.

Record
CVE-2012-5879
Updated
2026-11-02
EUVDEUVD-2012-5757 No score

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method.

Record
EUVD-2012-5757
Updated
2026-11-03
GitHub AdvisoriesGHSA-fcjc-4gvh-gg6w No score

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101...

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method.

Record
GHSA-fcjc-4gvh-gg6w
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMcAfee Virtual Technician (MVT) 6.5.0.2101 - Insecure ActiveX Method2013-03-29

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-5879 is a high vulnerability (CVSS 8.2) in Mcafee Virtual Technician, published March 28, 2013. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.20%, the 92nd percentile. No source names a fixed version.

References

MoveEnter Open