CVE-2020-7252

🗓️ 17 Feb 2020 06:35:14Reported by trellixType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 118 Views

Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2020-7252 Unquoted service executable path	17 Feb 202006:35	–	cvelist
EUVD	EUVD-2020-28379	7 Oct 202500:30	–	euvd
NVD	CVE-2020-7252	17 Feb 202007:15	–	nvd
Prion	Design/Logic Flaw	17 Feb 202007:15	–	prion
RedhatCVE	CVE-2020-7252	9 Jan 202609:07	–	redhatcve

NVD

Node

mcafee data_exchange_layerRange≤6.0.0

AND

microsoft windowsMatch-

[
  {
    "product": "Data Exchange Layer (DXL) Broker",
    "vendor": "McAfee, LLC",
    "versions": [
      {
        "lessThanOrEqual": "6.0.0",
        "status": "affected",
        "version": "6.0.x",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "5.0.2",
        "status": "affected",
        "version": "5.0.x",
        "versionType": "custom"
      }
    ]
  }
]