CVE-2009-5118

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows local users to gain privileges via a Trojan horse DLL in an unspecified directory, as demonstrated by scanning a document located on a remote share.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Aug 22, 2012
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2009

CVE-2009-51194.3The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 enables weak SSL ciphers in cCVE-2009-51204.3The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 allows connections to TCP porCVE-2009-51215.0Websense Email Security 7.1 before Hotfix 4 allows remote attackers to bypass the sender-based blacklist by using the 8BITMIME EHLO keyword CVE-2009-51225.0The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive informatiCVE-2009-51234.3The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (memory consCVE-2009-51244.3The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (applicationCVE-2009-51254.3Comodo Internet Security before 3.9.95478.509 allows remote attackers to bypass malware detection in an RAR archive via an unspecified manipCVE-2009-51264.3The Antivirus component in Comodo Internet Security before 3.8.65951.477 allows remote attackers to cause a denial of service (application cCVE-2009-51274.3The Antivirus component in Comodo Internet Security before 3.8.64739.471 allows remote attackers to cause a denial of service (application cCVE-2009-51285.0The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and process crash) via aCVE-2009-51295.0The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP authentication outage) viCVE-2009-51304.3The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (service crash) via an attachme
CVE-2009-5118: Critical severity, CVSS 9.3 | Vulnix