{"id":"CVE-2012-4598","aliases":["EUVD-2012-4523","GHSA-c8wq-8x3g-w4wh"],"status":"published","title":"An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows...","description":"An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.29384,"percentile":0.98192,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2012-08-22T10:00:00Z","modified":"2026-06-16T23:45:28Z","exploits":[{"source":"exploitdb","id":"EDB-18805","title":"McAfee Virtual Technician 6.3.0.1911 MVT.MVTControl.6300 - ActiveX 'GetObject()' Code Execution","type":"remote","platform":"windows","date":"2012-04-30","verified":true,"url":"https://www.exploit-db.com/exploits/18805"},{"source":"exploitdb","id":"EDB-18812","title":"McAfee Virtual Technician MVTControl 6.3.0.1911 - GetObject (Metasploit)","type":"remote","platform":"windows","date":"2012-05-01","verified":true,"url":"https://www.exploit-db.com/exploits/18812"},{"source":"metasploit","id":"exploit/windows/browser/mcafee_mvt_exec","title":"McAfee Virtual Technician MVTControl 6.3.0.1911 GetObject Vulnerability","type":"exploit","platform":"Windows","date":"2012-04-30","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/browser/mcafee_mvt_exec"}],"products":[{"vendor":"mcafee","product":"epo_mcafee_virtual_technician"},{"vendor":"mcafee","product":"mcafee_virtual_technician"}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10028","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4598"},{"url":"https://github.com/advisories/GHSA-c8wq-8x3g-w4wh"}],"sources":{"cve":[{"id":"CVE-2012-4598","description":"An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site.","status":"published","published":"2012-08-22T10:00:00Z","modified":"2024-09-17T03:48:04.14Z","updated_at":"2026-11-02T14:34:51.269982Z"}],"euvd":[{"id":"EUVD-2012-4523","description":"An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site.","status":"published","published":"2012-08-22T10:00:00Z","modified":"2024-09-17T03:48:04Z","updated_at":"2026-11-03T00:28:28.52027Z"}],"ghsa":[{"id":"GHSA-c8wq-8x3g-w4wh","title":"An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows...","description":"An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site.","status":"published","published":"2022-05-17T05:25:09Z","modified":"2023-01-28T05:03:56Z","updated_at":"2026-11-02T14:44:04.493027Z"}],"nvd":[{"id":"CVE-2012-4598","description":"An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site.","status":"published","published":"2012-08-22T10:42:05.523Z","modified":"2026-06-16T23:45:28.303Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:15.188652Z"}]}}