TITLE: McAfee Products Unspecified Code Execution Vulnerability

SECUNIA ADVISORY ID: SA21264

VERIFY ADVISORY: http://secunia.com/advisories/21264/

CRITICAL: Highly critical

IMPACT: System access

WHERE: >From remote

SOFTWARE: McAfee AntiSpyware 6.x - http://secunia.com/product/6439/
McAfee Internet Security Suite 2006 - http://secunia.com/product/11210/
McAfee Personal Firewall Plus 7.x - http://secunia.com/product/267/
McAfee Privacy Service 6.x - http://secunia.com/product/6481/
McAfee SpamKiller 7.x - http://secunia.com/product/7790/
McAfee VirusScan 10.x - http://secunia.com/product/9052/
McAfee Wireless Home Network Security 2006 - http://secunia.com/product/11211/

DESCRIPTION: eEye Digital Security has reported a vulnerability in various McAfee products, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to an unspecified error and allows execution of arbitrary code. No more information is currently available.

SOLUTION: Sufficient information about the vulnerability is not available to suggest a proper workaround.

PROVIDED AND/OR DISCOVERED BY: eEye Digital Security

ORIGINAL ADVISORY: eEye Digital Security: http://www.eeye.com/html/research/upcoming/20060719.html