VULHUB ™

McAfee VirusScan's WebScanX component hooks into explorer.exe on Microsoft Windows systems. When explorer is used to browse directories (local or network), and the user's home directory is located on a network share, WebScanX calls several .dll files from the user's home directory. If one of these called .dll files contained attacker-supplied code, it would be executed by WebScanX in the local System context.

McAfee VirusScan's WebScanX component hooks into explorer.exe on Microsoft Windows systems. When explorer is used to browse directories (local or network), and the user's home directory is located on a network share, WebScanX calls several .dll files from the user's home directory. If one of these called .dll files contained attacker-supplied code, it would be executed by WebScanX in the local System context.