How severe is CVE-2005-1107?

CVE-2005-1107 has a CVSS 2.0 base score of 7.2, rated high severity.

Is CVE-2005-1107 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (26th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2005-1107?

CVE-2005-1107 affects Mcafee Internet Security Suite. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2005-1107?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2005-1107 published?

CVE-2005-1107 was published on 2005-04-18 and last updated on 2026-06-16.

CVE-2005-1107

CVE-2005-1107 is a high-severity vulnerability in Mcafee Internet Security Suite with a CVSS 2.0 base score of 7.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.2)
EPSS exploit prediction: 0% (26th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Mcafee Internet Security Suite
Published: 2005-04-18
Last modified: 2026-06-16

Description

McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain privileges or disable protection by modifying certain files.

Frequently asked questions

What is CVE-2005-1107?: McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain privileges or disable protection by modifying certain files.
How severe is CVE-2005-1107?: CVE-2005-1107 has a CVSS 2.0 base score of 7.2, rated high severity.
Is CVE-2005-1107 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (26th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2005-1107?: CVE-2005-1107 affects Mcafee Internet Security Suite. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2005-1107?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2005-1107 published?: CVE-2005-1107 was published on 2005-04-18 and last updated on 2026-06-16.

References

http://www.idefense.com/application/poi/display?id=233&type=vulnerabilities

Affected products (1)

cpe:2.3:a:mcafee:internet_security_suite:2005:*:*:*:*:*:*:*

More vulnerabilities in Mcafee Internet Security Suite

CVE-2009-1348 — High (CVSS 7.6): The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft…
CVE-2006-3961 — Medium (CVSS 6.8): Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite…
CVE-2005-3377 — Medium (CVSS 5.1): Multiple interpretation error in (1) McAfee Internet Security Suite 7.1.5 version 9.1.08 with the 4.4.00 engine and (2)…
CVE-2006-5417 — Medium (CVSS 5.0): McAfee Network Agent (mcnasvc.exe) 1.0.178.0, as used by multiple McAfee products possibly including Internet Security…

All CVEs affecting Mcafee Internet Security Suite →