Lucene search

[email protected]CVE-2016-8031

HistoryMar 28, 2017 - 3:59 p.m.

CVE-2016-8031

2017-03-2815:59:00

CWE-264

[email protected]

web.nvd.nist.gov

intel

ave

5200

5800

vulnerability

security

bypass

local users

crafted input file

nvd

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local users to bypass local security protection via a crafted input file.

CPENameOperatorVersion
mcafee:anti-malware_scan_enginemcafee anti-malware scan engineeq5500
mcafee:anti-malware_scan_enginemcafee anti-malware scan engineeq5300
mcafee:anti-malware_scan_enginemcafee anti-malware scan engineeq5200
mcafee:anti-malware_scan_enginemcafee anti-malware scan engineeq5800
mcafee:anti-malware_scan_enginemcafee anti-malware scan engineeq5600
mcafee:anti-malware_scan_enginemcafee anti-malware scan engineeq5400
mcafee:anti-malware_scan_enginemcafee anti-malware scan engineeq5700

CPE	Name	Operator	Version
mcafee:anti-malware_scan_engine	mcafee anti-malware scan engine	eq	5500
mcafee:anti-malware_scan_engine	mcafee anti-malware scan engine	eq	5300
mcafee:anti-malware_scan_engine	mcafee anti-malware scan engine	eq	5200
mcafee:anti-malware_scan_engine	mcafee anti-malware scan engine	eq	5800
mcafee:anti-malware_scan_engine	mcafee anti-malware scan engine	eq	5600
mcafee:anti-malware_scan_engine	mcafee anti-malware scan engine	eq	5400
mcafee:anti-malware_scan_engine	mcafee anti-malware scan engine	eq	5700

References

www.securityfocus.com/bid/97142

www.securitytracker.com/id/1038159

kc.mcafee.com/corporate/index?page=content&id=SB10191

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2016-8031

prion1 cvelist1