CVE-2015-8577
2.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
19.9%
The Buffer Overflow Protection (BOP) feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| mcafee:virusscan_enterprise | mcafee virusscan enterprise | le | 8.8.0 |
Related
2.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
19.9%