CVE-2019-3667

CVE-2019-3667 affects McAfee TechCheck (Windows client) up to version 3.0.0.17, where a DLL search order hijacking vulnerability allows a local attacker to execute arbitrary code by placing a malicious DLL in a local folder. The affected component is McAfee TechCheck’s Windows client; root cause ...

McAfee Tech Check DLL Search Order Hijacking Vulnerability

McAfee Tech Check is a computer software and hardware scanning and diagnostic application from the U.S. company McAfee McAfee. McAfee Tech Check 3.0.0.17 and earlier versions contain a DLL search order hijacking vulnerability that can be exploited by a local attacker to execute arbitrary code via...

McAfee TechCheck for Windows CVE-2019-3667 DLL Loading Arbitrary Code Execution Vulnerability

Description McAfee TechCheck is prone to an arbitrary code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial of service condition. McAfee TechCheck versions 3.0.0.17 an...

The vulnerabilities of McAfee Total Protection (MTP), McAfee Anti-Virus Plus (AVP), and McAfee Internet Security (MIS) software lie in their shortcomings regarding the loading of external files and the verification of their digital signatures. This allows attackers to exploit these vulnerabilities to enhance their privileges and execute malicious code.

The vulnerabilities of McAfee Total Protection MTP, McAfee Anti-Virus Plus AVP, and McAfee Internet Security MIS are related to deficiencies in loading external files from inappropriate directories and verifying their digital signatures. Exploiting these vulnerabilities can allow attackers to...

The vulnerability of the McAfee Data Loss Prevention Endpoint, a software solution for protecting confidential data, stems from deficiencies in access control. This allows attackers to redirect log files to arbitrary locations.

The vulnerability of the McAfee Data Loss Prevention Endpoint security software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to redirect log files to arbitrary locations...

Analysis of LooCipher, a New Ransomware Family Observed This Year

ARCHIVED STORY Analysis of LooCipher, a New Ransomware Family Observed This Year By ATR Operational Intelligence Team · December 05, 2019 Co-authored by Marc RiveroLopez. Initial Discovery This year seems to again be the year for ransomware. Notorious attacks were made using ransomware and new...

Analysis of LooCipher, a New Ransomware Family Observed This Year

ARCHIVED STORY Analysis of LooCipher, a New Ransomware Family Observed This Year By ATR Operational Intelligence Team · December 05, 2019 Co-authored by Marc RiveroLopez. Initial Discovery This year seems to again be the year for ransomware. Notorious attacks were made using ransomware and new...

McAfee WebAdvisor Code Injection Vulnerability

McAfee WebAdvisor, a free product for keeping you safe online, identifies and warns about potentially risky websites and downloadable content. A code injection vulnerability in the Web interface of McAfee WebAdvisor versions prior to 4.1.1.48 can be exploited by a remote, unauthenticated attacker...

McAfee WebAdvisor API Abuse Vulnerability

McAfee WebAdvisor, a free product for keeping you safe online, identifies and warns about potentially risky websites and downloadable content. An API abuse vulnerability exists in the web interface of McAfee WebAdvisor versions prior to 4.1.1.48, which can be exploited by a remote, unauthenticate...

CVE-2019-3666

API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site...

CVE-2019-3666

API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site...

CVE-2019-3665

Code Injection vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site...

CVE-2019-3665

Code Injection vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site...

Code injection

API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site...

Code injection

Code Injection vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site...

CVE-2019-3665

CVE-2019-3665 affects the web interface of McAfee Web Advisor (WA) for versions before 4.1.1.48. The issue is a code injection vulnerability that allows a remote unauthenticated attacker to cause the browser to render websites that WA would normally block when presented via a carefully crafted si...

CVE-2019-3665 Code Injection vulnerability

Code Injection vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site...

CVE-2019-3666

CVE-2019-3666 affects McAfee Web Advisor (WA) web interface prior to version 4.1.1.48. The vulnerability is described as an API abuse/misuse in the WA web interface that allows a remote, unauthenticated attacker to induce the browser to navigate to restricted websites via a specially crafted web ...

CVE-2019-3666 API Abuse Vulnerability

API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site...

McAfee WebAdvisor TS102991 Multiple Security Vulnerabilities

Description McAfee WebAdvisor is prone to the following security vulnerabilities: 1. A remote code injection vulnerability 2. A security vulnerability. Successfully exploiting these issues may allow attacker to inject and execute arbitrary code. This may lead to other attacks. McAfee WebAdvisor...