Spoofing

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised folder...

CVE-2019-3587

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised folder...

CVE-2019-3587

CVE-2019-3587 applies to the Windows client of McAfee Total Protection (MTP) prior to version 16.0.18 . The vulnerability is a DLL Search Order Hijacking issue that enables local code execution when a user runs from a compromised folder. Affected product: McAfee Total Protection (Windows client)....

CVE-2019-3587 DLL Search Order Hijacking vulnerability

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised folder...

CVE-2019-3587: Untrusted Search Path

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised folder...

McAfee Total Protection Detection (Windows SMB Login)

Detects the installed version of McAfee Total Protection. The script logs in via smb, searches for string SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

McAfee Total Protection Multiple Vulnerabilities - Windows

McAfee Total Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Total Protection Denial of Service Vulnerability

McAfee Total Protection is a suite of antivirus software.McAfee File Lock is a file locking software that provides data encryption protection.McPvDrv.sys is one of the drivers. A security vulnerability in McPvDrv.sys in McAfee File Lock for McAfee Total Protection allows a local attacker to explo...

McAfee Total Protection Stack Buffer Overflow Vulnerability

McAfee Total Protection is a suite of antivirus software.McAfee File Lock is a file locking software that provides data encryption protection.McPvDrv.sys is one of the drivers. A stack buffer overflow vulnerability in McPvDrv.sys in McAfee File Lock by McAfee Total Protection allows a local...

Design/Logic Flaw

McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial of service system crash via a large VERIFYINFORMATION.Length value in an IOCTLDISKVERIFY ioctl call...

CVE-2015-8772

CVE-2015-8772 affects McAfee Total Protection, specifically the McPvDrv.sys driver (4.6.111.0) used by McAfee File Lock. The issue arises when an IOCTL_DISK_VERIFY call uses a very large VerifyInformation.Length value, enabling local users to read sensitive data from kernel memory or trigger a sy...

CVE-2015-8773

CVE-2015-8773 describes a stack-based buffer overflow in McPvDrv.sys 4.6.111.0 within McAfee File Lock (part of McAfee Total Protection). The flaw can be triggered via a long vault GUID in an ioctl call, leading to a denial of service (system crash). Public details in the NVD entry (CVSS v3 base ...

CVE-2015-8772: Undefined Security Weakness

McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial of service system crash via a large VERIFYINFORMATION.Length value in an IOCTLDISKVERIFY ioctl call...

CVE-2015-8773: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service system crash via a long vault GUID in an ioctl call...

CVE-2010-5166

Race condition in McAfee Total Protection 2010 10.0.580 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

Race condition

Race condition in McAfee Total Protection 2010 10.0.580 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5166

CVE-2010-5166 describes a race condition in McAfee Total Protection 2010 10.0.580 on Windows XP that allows local users to bypass kernel-mode hook handlers by making specific user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). Affected component appears to be k...

CVE-2010-5166

Race condition in McAfee Total Protection 2010 10.0.580 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5166: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in McAfee Total Protection 2010 10.0.580 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

PT-2012-1378 · Mcafee · Mcafee Total Protection

Name of the Vulnerable Software and Affected Versions: McAfee Total Protection version 10.0.580 Description: A race condition exists that allows local users to bypass kernel-mode hook handlers and execute dangerous code. This is achieved through certain user-space memory changes during hook-handl...