CVE-2015-8772

CVE-2015-8772 affects McAfee Total Protection, specifically the McPvDrv.sys driver (4.6.111.0) used by McAfee File Lock. The issue arises when an IOCTL_DISK_VERIFY call uses a very large VerifyInformation.Length value, enabling local users to read sensitive data from kernel memory or trigger a sy...

CVE-2015-8773

CVE-2015-8773 describes a stack-based buffer overflow in McPvDrv.sys 4.6.111.0 within McAfee File Lock (part of McAfee Total Protection). The flaw can be triggered via a long vault GUID in an ioctl call, leading to a denial of service (system crash). Public details in the NVD entry (CVSS v3 base ...

McAfee Application Control Version Detection

Detects the installed version of McAfee Application Control. The script detects the version of McAfee Application Control. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

McAfee Application Control Multiple Vulnerabilities (Jan 2016) - Windows

McAfee Application Control is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Agent Detection (Linux/MacOS)

Binary data mcafeeepoagentinstallednix.nbin...

The vulnerabilities of McAfee VirusScan Enterprise, AVG InternetSecurity, and Kaspersky Total Security allow attackers to bypass the DEP and ASLR protection mechanisms.

The vulnerability of McAfee VirusScan Enterprise, AVG InternetSecurity, and Kaspersky Total Security anti-virus tools is related to the allocation of memory with read, write, and execute permissions during the protection of user processes. Exploiting this vulnerability can allow a malicious actor...

McAfee VirusScan Enterprise Security Bypass Vulnerability (Jan 2016) - Windows

McAfee VirusScan Enterprise is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

NetSchedScan 1.0 - Crash (PoC)

NetSchedScan 1.0 - Crash PoC !/usr/bin/env python -- coding: utf-8 -- Exploit Title : NetSchedScan v1.0 scan Hostname/IP Field Buffer Overflow Crash PoC Discovery by : Abraham Espinosa Email : [email protected] Discovery Date : 14/01/2016 Vendor Homepage : http://www.foundstone.com...

McAfee Agent Detection

Binary data mcafeeepoagentinstalled.nbin...

McAfee Application Control swin.sys Kernel Driver Denial of Service Vulnerability

McAfee Application Control is a suite of program control software. The software protects enterprise servers and endpoints from the threat of unauthorized applications and malware by using a dynamic trust model. A security vulnerability in the swin.sys kernel driver for McAfee Application Control ...

NetSchedScan 1.0 - Crash (PoC)

Exploit for windows platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Exploit Title : NetSchedScan v1.0 scan Hostname/IP Field Buffer Overflow Crash PoC Discovery by : Abraham Espinosa Email : email protected Discovery Date : 14/01/2016 Vendor Homepage :...

McAfee Application Control swin.sys Memory Corruption (SB10145)

The version of McAfee Application Control is 6.1.0 prior to build 706, 6.1.1 prior to build 404, 6.1.2 prior to build 449, 6.1.3 prior to build 441, or 6.2.0 prior to build 505. It is, therefore, affected by a kernel memory corruption issue in the swin.sys driver when handling a 786 syscall, whic...

McAfee Application Control swin. sys kernel driver denial of service vulnerability, CVE-2 0 1 6-1 7 1 5-the vulnerability warning-the black bar safety net

Affected system: McAfee Application Control 6.2.0 McAfee Application Control 6.1.3 McAfee Application Control 6.1.2 McAfee Application Control 6.1.1 McAfee Application Control 6.1.0 Description: CVECAN ID: CVE-2 0 1 6-1 7 1 5 McAfee Application Control is a centrally managed whitelisting solution...

CVE-2016-1715

The swin.sys kernel driver in McAfee Application Control MAC 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit Windows platforms allows local users to cause a denial of service memory corruption and system crash or...

CVE-2016-1715

The swin.sys kernel driver in McAfee Application Control MAC 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit Windows platforms allows local users to cause a denial of service memory corruption and system crash or...

Memory corruption

The swin.sys kernel driver in McAfee Application Control MAC 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit Windows platforms allows local users to cause a denial of service memory corruption and system crash or...

CVE-2016-1715

CVE-2016-1715 affects the McAfee Application Control (MAC) kernel driver swin.sys on 32‑bit Windows. The issue is a memory corruption condition triggered by handling a 768 syscall, where a zero can be written to an arbitrary kernel memory location. This enables local attackers to cause a denial o...

CVE-2016-1715

The swin.sys kernel driver in McAfee Application Control MAC 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit Windows platforms allows local users to cause a denial of service memory corruption and system crash or...

McAfee Application Control Kernel Driver Memory Corruption Elevation of Privilege Vulnerability

McAfee Application Control is a centrally managed whitelisting solution. McAfee Application Control has a security vulnerability in the handling of syscall 768 within the swin.sys kernel driver, which can be exploited to execute arbitrary code in the system context by writing a "0" to any locatio...

Intel McAfee ePolicy Orchestrator Arbitrary Code Execution Vulnerability

Intel McAfee ePolicy Orchestrator ePO is a suite of scalable security management software from Intel Corporation formerly McAfee, Inc.. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. A security vulnerability exists in Inte...