Buffer overflow

A buffer overflow vulnerability in McAfee Data Loss Prevention DLP Endpoint for Windows prior to 11.6.200 allows a local attacker to execute arbitrary code with elevated privileges through placing carefully constructed Ami Pro .sam files onto the local system and triggering a DLP Endpoint scan...

Buffer overflow

A buffer overflow vulnerability in McAfee Data Loss Prevention DLP Discover prior to 11.6.100 allows an attacker in the same network as the DLP Discover to execute arbitrary code through placing carefully constructed Ami Pro .sam files onto a machine and having DLP Discover scan it, leading to...

Design/Logic Flaw

XML Entity Expansion injection vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2021 Update allows a local user to initiate high CPU and memory consumption resulting in a Denial of Service attack through carefully editing the EPDeploy.xml file and then executing...

CVE-2021-31844 Local Privilege Escalation in McAfee DLP Endpoint for Windows

A buffer overflow vulnerability in McAfee Data Loss Prevention DLP Endpoint for Windows prior to 11.6.200 allows a local attacker to execute arbitrary code with elevated privileges through placing carefully constructed Ami Pro .sam files onto the local system and triggering a DLP Endpoint scan...

CVE-2021-31844

CVE-2021-31844 affects McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.200. A buffer overflow allows a local attacker to execute arbitrary code with elevated privileges by placing crafted Ami Pro (.sam) files and triggering a DLP Endpoint scan; caused by a destination buffer ...

CVE-2021-31845 Remote Code Execution in McAfee DLP Discover

A buffer overflow vulnerability in McAfee Data Loss Prevention DLP Discover prior to 11.6.100 allows an attacker in the same network as the DLP Discover to execute arbitrary code through placing carefully constructed Ami Pro .sam files onto a machine and having DLP Discover scan it, leading to...

CVE-2021-31845

CVE-2021-31845 describes a buffer overflow in McAfee Data Loss Prevention (DLP) Discover prior to 11.6.100. The vulnerability arises from a fixed-size destination buffer and improper checks of the source size, enabling an attacker on the same network to trigger remote code execution with elevated...

CVE-2021-31843

CVE-2021-31843 affects McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Sept 2021 Update. The vulnerability is due to improper privileges management that allows a local user to access files they normally cannot by manipulating junction links to redirect McAfee folder operations to an un...

CVE-2021-31843 Improper access control vulnerability in McAfee ENS for Windows

Improper privileges management vulnerability in McAfee Endpoint Security ENS Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended locatio...

CVE-2021-31842

XML Entity Expansion injection vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2021 Update allows a local user to initiate high CPU and memory consumption resulting in a Denial of Service attack through carefully editing the EPDeploy.xml file and then executing...

CVE-2021-31842

The CVE-2021-31842 issue affects McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 (Sept 2021 Update). The root cause is an XML Entity Expansion injection in EPDeploy.xml processing, enabling a local user to trigger high CPU and memory usage and cause a Denial of Service. Documents consi...

McAfee Endpoint Security 后置链接漏洞

Mcafee McAfee Endpoint Security ENS is a set of U.S. McAfee Mcafee company to provide intelligent collaboration and advanced threat defense framework. The framework supports control of the entire threat defense lifecycle for real-time communications and actionable threat forensics, among other...

PT-2021-19547 · Mcafee · Mcafee Data Loss Prevention (Dlp) Discover

Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention DLP Discover versions prior to 11.6.100 Description: A buffer overflow issue allows an attacker in the same network as the DLP Discover to execute arbitrary code through placing carefully constructed Ami Pro .sam...

McAfee DLPe Agent < 11.6.200 Buffer Overflow (SB10368)

The version of the McAfee Data Loss Prevention Endpoint DLPe Agent installed on the remote Windows host is prior to 11.6.200. It is, therefore, affected by a vulnerability caused by copying a buffer without first checking the size of the input. This can be exploited by an authenticated, local...

PT-2021-19546 · Mcafee · Mcafee Data Loss Prevention Endpoint

Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention DLP Endpoint for Windows versions prior to 11.6.200 Description: A buffer overflow issue allows a local attacker to execute arbitrary code with elevated privileges by placing carefully constructed Ami Pro .sam file...

PT-2021-19545 · Mcafee · Mcafee Endpoint Security

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS Windows versions prior to 10.7.0 September 2021 Update Description: The issue allows local users to access files they would otherwise not have access to by manipulating junction links to redirect McAfee folder...

McAfee Data Loss Prevention 安全漏洞

Mcafee McAfee Data Loss Prevention DLP is a data loss prevention suite from Mcafee, Inc. that includes components such as McAfee DLP Monitor, McAfee DLP Endpoint, and provides event management and reporting, synchronization of local and cloud DLP policies, and more. A security vulnerability exist...

Finding 0-days with Jackalope

ARCHIVED STORY Finding 0-days with Jackalope By Douglas McKee · September 16, 2021 Overview On March 21st, 2021, the McAfee Enterprise Advanced Threat Research ATR team released several vulnerabilities it discovered in the Netop Vision Pro Education software, a popular schooling software used by...

McAfee Data Loss Prevention 安全漏洞

McAfee Data Loss Prevention Discover McAfee DLP Discover helps you locate and classify sensitive data, understand how it is used, and protect it. buffer overflow vulnerabilities exist in versions of McAfee Data Loss Prevention Discover prior to 11.6.100. Overflow vulnerability. The vulnerability...

Operation ‘Harvest’: A Deep Dive into a Long-term Campaign

ARCHIVED STORY Operation ‘Harvest’: A Deep Dive into a Long-term Campaign By Christiaan Beek · September 14, 2021 A special thanks to our Professional Services’ IR team, ShadowServer, for historical context on C2 domains, and Thomas Roccia/Leandro Velasco for malware analysis support. Executive...