Lucene search

IntelCVE-2016-8012

HistoryMar 14, 2017 - 10:59 p.m.

CVE-2016-8012

2017-03-1422:59:00

CWE-264

intel

web.nvd.nist.gov

cve-2016-8012

intel

security

data loss prevention

endpoint

vulnerability

access control

authenticated users

hook dlls

processes

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

Percentile

12.6%

JSON

Access control vulnerability in Intel Security Data Loss Prevention Endpoint (DLPe) 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process memory get.

Affected configurations

Nvd

Vulners

Node

mcafeedata_loss_prevention_endpointRange9.3.0–9.3.600

mcafeedata_loss_prevention_endpointRange9.4.0–9.4.200

VendorProductVersionCPE
mcafeedata_loss_prevention_endpoint*cpe:2.3:a:mcafee:data_loss_prevention_endpoint:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mcafee	data_loss_prevention_endpoint	*	cpe:2.3:a:mcafee:data_loss_prevention_endpoint::::::::

CNA Affected

[
  {
    "product": "Data Loss Prevention Endpoint (DLPe)",
    "vendor": "Intel",
    "versions": [
      {
        "status": "affected",
        "version": "9.4.200 and 9.3.600"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10185

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2016-8012