PT-2021-15576

Name of the Vulnerable Software and Affected Versions: McAfee Total Protection versions prior to 16.0.32 Description: The issue allows a local user to gain elevated privileges by manipulating a symbolic link in the IOCTL interface. This is related to the File Lock component. Recommendations: For...

Description of the security update for Office Online Server: April 14, 2020

Description of the security update for Office Online Server: April 14, 2020 Applies To DONOTUSEOffice Online Server Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more...

DEBIAN-CVE-2020-7040

storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that fi...

Code injection

Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page...

CVE-2017-2144: Undefined Security Weakness

Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page...

PT-2017-15208

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.4 Description The issue may allow an attacker to lock another user's file through a specially crafted page. Recommendations For Cybozu Garoon versions 3.0.0 through 4.2.4, update to a version that...

Ransomware Gives Free Decryption Keys to Victims Who Infect Others

Researchers say they have uncovered ransomware still under development that comes with a novel and nasty twist. Infected victims of the ransomware known as Popcorn Time, have the option to either pay up, or they can opt to infect two others using a referral link. If the two new ransomware targets...

UBUNTU-CVE-2015-8966

arch/arm/kernel/sysoabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted 1 FOFDGETLK, 2 FOFDSETLK, or 3 FOFDSETLKW command in an fcntl64 system call...

McAfee Total Protection Multiple Vulnerabilities - Windows

McAfee Total Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Total Protection Stack Buffer Overflow Vulnerability

McAfee Total Protection is a suite of antivirus software.McAfee File Lock is a file locking software that provides data encryption protection.McPvDrv.sys is one of the drivers. A stack buffer overflow vulnerability in McPvDrv.sys in McAfee File Lock by McAfee Total Protection allows a local...

McAfee Total Protection Denial of Service Vulnerability

McAfee Total Protection is a suite of antivirus software.McAfee File Lock is a file locking software that provides data encryption protection.McPvDrv.sys is one of the drivers. A security vulnerability in McPvDrv.sys in McAfee File Lock for McAfee Total Protection allows a local attacker to explo...

CVE-2015-8772

McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial of service system crash via a large VERIFYINFORMATION.Length value in an IOCTLDISKVERIFY ioctl call...

CVE-2015-8773

Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service system crash via a long vault GUID in an ioctl call...

Stack overflow

Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service system crash via a long vault GUID in an ioctl call...

CVE-2015-8772

McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial of service system crash via a large VERIFYINFORMATION.Length value in an IOCTLDISKVERIFY ioctl call...

CVE-2015-8773

Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service system crash via a long vault GUID in an ioctl call...

CVE-2015-8772

CVE-2015-8772 affects McAfee Total Protection, specifically the McPvDrv.sys driver (4.6.111.0) used by McAfee File Lock. The issue arises when an IOCTL_DISK_VERIFY call uses a very large VerifyInformation.Length value, enabling local users to read sensitive data from kernel memory or trigger a sy...

CVE-2015-8773

CVE-2015-8773 describes a stack-based buffer overflow in McPvDrv.sys 4.6.111.0 within McAfee File Lock (part of McAfee Total Protection). The flaw can be triggered via a long vault GUID in an ioctl call, leading to a denial of service (system crash). Public details in the NVD entry (CVSS v3 base ...

PT-2016-4012

Name of the Vulnerable Software and Affected Versions McAfee File Lock versions 5.x Description The issue allows local users to obtain sensitive information from kernel memory or cause a denial of service, resulting in a system crash. This is achieved via a large VERIFY INFORMATION.Length value i...

PT-2016-4013

Name of the Vulnerable Software and Affected Versions McAfee File Lock versions 5.x Description The issue is related to a stack-based buffer overflow in the McPvDrv.sys driver, which can cause a denial of service, resulting in a system crash. This occurs when a long vault GUID is passed in an ioc...