CVE:CVE-2006-3961
CNNVD:CNNVD-200608-011
McAee产品查验管理器(McAfee Subscription Manager)是随McAfee很多产品一起发布的用于管理产品许可权限组件，它是一个ActiveX控件，厂商可以通过它检查产品的使用合法性。
McAfee产品查验管理器实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。
产品查验管理器的实现模块McSubMgr.dll没有检查传入的参数长度，远程攻击者可以诱使用户访问恶意网站，在网页脚本中向McSubMgr.dll传送超过3000字节长的数据导致发生栈溢出，从而执行任意指令。
链接：http://www.securityfocus.com/archive/1/442495/30/0/threaded
solution:Upgrade mcafee antispyware to a higher version than 2005,2006,and avoid the version 2005,2006; Upgrade mcafee internet_security_suite to a higher version than 2004,2005,2006,and avoid the version 2004,2005,2006; Upgrade mcafee personal_firewall_plus to a higher version than 2004,2005,2006,and avoid the version 2004,2005,2006; Upgrade mcafee privacy_service to a higher version than 2004,2005,2006,and avoid the version 2004,2005,2006; Upgrade mcafee quickclean to a higher version than 2004,2005,2006,and avoid the version 2004,2005,2006; Upgrade mcafee security_center to a higher version than 4.3,6.0,6.0.22,6.0.23,and avoid the version 4.3,6.0,6.0.22,6.0.23; Upgrade mcafee spamkiller to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade mcafee virusscan to a higher version than 2004,2005,2006,and avoid the version 2004,2005,2006; Upgrade mcafee wireless_home_network_security to a higher version than 2006,and avoid the version 2006