High

DATE	CVE	VULNERABILITY TITLE	RISK
2009-04-30	CVE-2009-1348	Improper Input Validation vulnerability in Mcafee products The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive. network high complexity mcafee CWE-20	7.6
2005-04-18	CVE-2005-1107	Unspecified vulnerability in Mcafee Internet Security Suite 2005 McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain privileges or disable protection by modifying certain files. local low complexity mcafee	7.2