CVE-2006-3961

Exp

Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute arbitrary commands via long string parameters, which are later used in vsprintf.

Published: 2006-08-01 Last update: 2026-04-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2006-3961 is rated High Exploit Risk (77.4/100): CVSS Medium severity, with high exploitation likelihood (EPSS 71.49%, 99th percentile). 1 public exploit reference(s) are indexed (Exploit-DB). Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2006-3961

EDB-ID Source Kind Published Link
16510 exploit_db edb 2010-07-03 Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2006-3961

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-02-21 70.79% 71.49% +0.70%
2 2025-03-30 73.50% 70.79% -2.70%
3 2025-03-29 — 73.50% —

Full EPSS history (15 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2006-3961

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
6.8 2.0 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
 8.6 6.4 [email protected]

Weakness enumeration for CVE-2006-3961

Affected software / configurations for CVE-2006-3961

Vendor Product Version Raw CPE
mcafee antispyware 2005 cpe:2.3:a:mcafee:antispyware:2005:*:*:*:*:*:*:*
mcafee antispyware 2006 cpe:2.3:a:mcafee:antispyware:2006:*:*:*:*:*:*:*
mcafee internet_security_suite 2004 cpe:2.3:a:mcafee:internet_security_suite:2004:*:*:*:*:*:*:*
mcafee internet_security_suite 2005 cpe:2.3:a:mcafee:internet_security_suite:2005:*:*:*:*:*:*:*
mcafee internet_security_suite 2006 cpe:2.3:a:mcafee:internet_security_suite:2006:*:*:*:*:*:*:*
mcafee personal_firewall_plus 2004 cpe:2.3:a:mcafee:personal_firewall_plus:2004:*:*:*:*:*:*:*
mcafee personal_firewall_plus 2005 cpe:2.3:a:mcafee:personal_firewall_plus:2005:*:*:*:*:*:*:*
mcafee personal_firewall_plus 2006 cpe:2.3:a:mcafee:personal_firewall_plus:2006:*:*:*:*:*:*:*
mcafee privacy_service 2004 cpe:2.3:a:mcafee:privacy_service:2004:*:*:*:*:*:*:*
mcafee privacy_service 2005 cpe:2.3:a:mcafee:privacy_service:2005:*:*:*:*:*:*:*
mcafee privacy_service 2006 cpe:2.3:a:mcafee:privacy_service:2006:*:*:*:*:*:*:*
mcafee quickclean 2004 cpe:2.3:a:mcafee:quickclean:2004:*:*:*:*:*:*:*
mcafee quickclean 2005 cpe:2.3:a:mcafee:quickclean:2005:*:*:*:*:*:*:*
mcafee quickclean 2006 cpe:2.3:a:mcafee:quickclean:2006:*:*:*:*:*:*:*
mcafee security_center 4.3 cpe:2.3:a:mcafee:security_center:4.3:*:*:*:*:*:*:*
mcafee security_center 6.0 cpe:2.3:a:mcafee:security_center:6.0:*:*:*:*:*:*:*
mcafee security_center 6.0.22 cpe:2.3:a:mcafee:security_center:6.0.22:*:*:*:*:*:*:*
mcafee security_center 6.0.23 cpe:2.3:a:mcafee:security_center:6.0.23:*:*:*:*:*:*:*
mcafee spamkiller 5.0 cpe:2.3:a:mcafee:spamkiller:5.0:*:*:*:*:*:*:*
mcafee spamkiller 6.0 cpe:2.3:a:mcafee:spamkiller:6.0:*:*:*:*:*:*:*
mcafee spamkiller 7.0 cpe:2.3:a:mcafee:spamkiller:7.0:*:*:*:*:*:*:*
mcafee virusscan 2004 cpe:2.3:a:mcafee:virusscan:2004:*:*:*:*:*:*:*
mcafee virusscan 2005 cpe:2.3:a:mcafee:virusscan:2005:*:*:*:*:*:*:*
mcafee virusscan 2006 cpe:2.3:a:mcafee:virusscan:2006:*:*:*:*:*:*:*
mcafee wireless_home_network_security 2006 cpe:2.3:a:mcafee:wireless_home_network_security:2006:*:*:*:*:*:*:*

References for CVE-2006-3961

cvelogic Threat Intelligence