McAfee Application Control swin.sys Memory Corruption (SB10145)

The version of McAfee Application Control is 6.1.0 prior to build 706, 6.1.1 prior to build 404, 6.1.2 prior to build 449, 6.1.3 prior to build 441, or 6.2.0 prior to build 505. It is, therefore, affected by a kernel memory corruption issue in the swin.sys driver when handling a 786 syscall, whic...

McAfee Application Control swin. sys kernel driver denial of service vulnerability, CVE-2 0 1 6-1 7 1 5-the vulnerability warning-the black bar safety net

Affected system: McAfee Application Control 6.2.0 McAfee Application Control 6.1.3 McAfee Application Control 6.1.2 McAfee Application Control 6.1.1 McAfee Application Control 6.1.0 Description: CVECAN ID: CVE-2 0 1 6-1 7 1 5 McAfee Application Control is a centrally managed whitelisting solution...

CVE-2016-1715

The swin.sys kernel driver in McAfee Application Control MAC 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit Windows platforms allows local users to cause a denial of service memory corruption and system crash or...

CVE-2016-1715

The swin.sys kernel driver in McAfee Application Control MAC 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit Windows platforms allows local users to cause a denial of service memory corruption and system crash or...

Memory corruption

The swin.sys kernel driver in McAfee Application Control MAC 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit Windows platforms allows local users to cause a denial of service memory corruption and system crash or...

CVE-2016-1715

CVE-2016-1715 affects the McAfee Application Control (MAC) kernel driver swin.sys on 32‑bit Windows. The issue is a memory corruption condition triggered by handling a 768 syscall, where a zero can be written to an arbitrary kernel memory location. This enables local attackers to cause a denial o...

CVE-2016-1715

The swin.sys kernel driver in McAfee Application Control MAC 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit Windows platforms allows local users to cause a denial of service memory corruption and system crash or...

McAfee Application Control Kernel Driver Memory Corruption Elevation of Privilege Vulnerability

McAfee Application Control is a centrally managed whitelisting solution. McAfee Application Control has a security vulnerability in the handling of syscall 768 within the swin.sys kernel driver, which can be exploited to execute arbitrary code in the system context by writing a "0" to any locatio...

McAfee Application Control Kernel Driver Memory Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of McAfee Application Control. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

SEC Consult SA-20150728-0 :: McAfee Application Control Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory 20150728-0 ======================================================================= title: McAfee Application Control Multiple Vulnerabilities product: McAfee Application Control vulnerable version: verified in version 6.1.3.353 fixed version: a fixe...

McAfee Application Control Buffer Overflow Vulnerability

McAfee Application Control is a suite of program control software from the U.S.-based company McAfee. The software protects enterprise servers and endpoints from unauthorized applications and malware threats by using a dynamic trust model. A buffer overflow vulnerability exists in McAfee...

McAfee Application Control Denial of Service Vulnerability

McAfee Application Control is a suite of program control software from the U.S.-based company McAfee. The software protects enterprise servers and endpoints from unauthorized applications and malware threats by using a dynamic trust model. A denial of service vulnerability exists in McAfee...

McAfee Application Control Security Bypass Vulnerability

McAfee Application Control is a suite of program control software from the U.S.-based company McAfee. The software protects enterprise servers and endpoints from unauthorized applications and malware threats by using a dynamic trust model. McAfee Application Control has a security vulnerability...