CVE-2005-4505

no score yetEPSS 1.0%

Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run by naPrdMgr.exe when it attempts to execute EntVUtil.EXE under an unquoted "Program Files" path.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
Published: 2005-12-23
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mcafee:common_management_agent
mcafee:virusscan_enterprise

References

http://reedarvin.thearvins.com/20051222-01.html
http://securityreason.com/securityalert/292
http://securitytracker.com/id?1015404
http://www.securityfocus.com/archive/1/420104/100/0/threaded
http://www.securityfocus.com/bid/16040

Check your stack JSON