Lucene search

TrellixCVELIST:CVE-2019-3648

HistoryNov 13, 2019 - 8:55 a.m.

CVE-2019-3648 Implicit loading of DLLs

2019-11-1308:55:53

trellix

www.cve.org

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L

AI Score

6.8

Confidence

High

EPSS

Percentile

12.6%

JSON

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission.

CNA Affected

[
  {
    "product": "McAfee Total Protection",
    "vendor": "McAfee,LLC",
    "versions": [
      {
        "lessThan": "16.0.R22 Refresh 1",
        "status": "affected",
        "version": "16.0.x",
        "versionType": "custom"
      }
    ]
  }
]

References

safebreach.com/Post/McAfee-All-Editions-MTP-AVP-MIS-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-3648

service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102984

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L

AI Score

6.8

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2019-3648