CVE-2021-23872

Summary: CVE-2021-23872 affects McAfee Total Protection (MTP) — File Lock component. **Root cause:**Privilege escalation by manipulating a symbolic link through the IOCTL interface. Impact: local user gains elevated privileges (confidentiality, integrity, and availability impact rated High). Affe...

Mcafee McAfee Total Protection 后置链接漏洞

McAfee Total Protection MTP is a one-stop security suite. An elevation of privilege vulnerability exists in the File Lock component of McAfee Total Protection prior to version 16.0.32. An attacker could use this vulnerability to elevate privileges by manipulating symbolic links in the IOCTL...

Description of the security update for Office Online Server: April 14, 2020

None None...

DEBIAN-CVE-2020-7040

storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that fi...

Code injection

Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page...

Ransomware Gives Free Decryption Keys to Victims Who Infect Others

Researchers say they have uncovered ransomware still under development that comes with a novel and nasty twist. Infected victims of the ransomware known as Popcorn Time, have the option to either pay up, or they can opt to infect two others using a referral link. If the two new ransomware targets...

UBUNTU-CVE-2015-8966

arch/arm/kernel/sysoabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted 1 FOFDGETLK, 2 FOFDSETLK, or 3 FOFDSETLKW command in an fcntl64 system call...

McAfee Total Protection Multiple Vulnerabilities - Windows

McAfee Total Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Total Protection Stack Buffer Overflow Vulnerability

McAfee Total Protection is a suite of antivirus software.McAfee File Lock is a file locking software that provides data encryption protection.McPvDrv.sys is one of the drivers. A stack buffer overflow vulnerability in McPvDrv.sys in McAfee File Lock by McAfee Total Protection allows a local...

McAfee Total Protection Denial of Service Vulnerability

McAfee Total Protection is a suite of antivirus software.McAfee File Lock is a file locking software that provides data encryption protection.McPvDrv.sys is one of the drivers. A security vulnerability in McPvDrv.sys in McAfee File Lock for McAfee Total Protection allows a local attacker to explo...

CVE-2015-8773

Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service system crash via a long vault GUID in an ioctl call...

CVE-2015-8772

McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial of service system crash via a large VERIFYINFORMATION.Length value in an IOCTLDISKVERIFY ioctl call...

Stack overflow

Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service system crash via a long vault GUID in an ioctl call...

CVE-2015-8772

CVE-2015-8772 affects McAfee Total Protection, specifically the McPvDrv.sys driver (4.6.111.0) used by McAfee File Lock. The issue arises when an IOCTL_DISK_VERIFY call uses a very large VerifyInformation.Length value, enabling local users to read sensitive data from kernel memory or trigger a sy...

CVE-2015-8773

CVE-2015-8773 describes a stack-based buffer overflow in McPvDrv.sys 4.6.111.0 within McAfee File Lock (part of McAfee Total Protection). The flaw can be triggered via a long vault GUID in an ioctl call, leading to a denial of service (system crash). Public details in the NVD entry (CVSS v3 base ...

CVE-2015-8772

McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial of service system crash via a large VERIFYINFORMATION.Length value in an IOCTLDISKVERIFY ioctl call...

CVE-2015-8773

Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service system crash via a long vault GUID in an ioctl call...

Linux Kernel 2.6.10 File Lock Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12949/info A local denial of service vulnerability reportedly affects the Linux kernel. This issue arises due to a failure of the kernel to properly handle malicious, excessive file locks. An attacker may leverage this...

Linux Kernel 2.6.x Time_Out_Leases PrintK Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15627/info Linux kernel is susceptible to a local denial-of-service vulnerability. Local attackers may trigger this issue by obtaining numerous file-lock leases, which will consume excessive kernel log memory. Once the...

Linux Kernel 2.6.x File Lock Lease Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15745/info Linux kernel is susceptible to a local denial-of-service vulnerability. This issue is triggered when excessive kernel memory is consumed by numerous file-lock leases. This problem stems from a memory leak in th...