McAfee VirusScan Enterprise < 8.8 Patch 9 Scriptscan COM Object DoS (SB10194)

The version of McAfee VirusScan Enterprise VSE installed on the remote Windows host is prior to 8.9 Patch 9. It is, therefore, affected by a memory corruption issue in the Scriptscan COM object. An unauthenticated, remote attacker can exploit this, via a specially crafted HTML link, to cause a...

Lack of Communication Achilles' Heel for Ransomware Fighters

BOSTON—Collaboration is important when it comes to fighting ransomware, but the lack of communication around the issue remains a serious impediment, law enforcement says. “If we don’t know about it and no one keeps track of it, then no one cares,” Frank McLaughlin, a detective with the Boston...

McAfee VirusScan Enterprise Denial of Service Vulnerability

McAfee VirusScan Enterprise is a suite of antivirus software from the American company McAfee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. A security vulnerability exists in Scriptscan COM Object in McAfee...

McAfee VirusScan Enterprise CVE-2016-8030 Memory Corruption Vulnerability - Windows

McAfee VirusScan Enterprise for Windows is prone to a remote memory-corruption vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

Memory corruption

A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link...

CVE-2016-8030

A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link...

CVE-2016-8030

A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link...

CVE-2016-8030

McAfee VirusScan Enterprise for Windows is affected by CVE-2016-8030: memory corruption in the Scriptscan COM Object present in VSE 8.8 Patch 8 and earlier. An unauthenticated remote attacker can exploit a specially crafted HTML link to cause a Denial of Service on the active Internet Explorer ta...

Recently being a hot Word 0day vulnerability has been used for malware spreading and the country attack-vulnerability warning-the black bar safety net

Recently Microsoft Word 0day vulnerabilities is very hot, this month's Patch Tuesday, Microsoft also finally released for the CVE-2017-0199 vulnerability patch, and the previously reported difference is that this vulnerability also affects Microsoft's own WordPad. According to security firm FireE...

Office discovered zero vulnerabilities hackers can use the Word document to install malicious software-vulnerability warning-the black bar safety net

According to foreign media reports, recently a period of time, you when opening a Word document may have to be careful because the security company MCAfee researchers in Microsoft Office software found in a zero vulnerabilities, hackers can use it quietly in your computer system to install...

Office Zero Day Delivering FINSPY Spyware to Victims in Russia

Since at least January, unidentified state-sponsored attackers have been targeting victims in Russia with FINSPY spyware delivered in exploits for an Office and WordPad zero-day vulnerability patched on Tuesday by Microsoft. Separately, the same zero-day has been leveraged in financially motivate...

McAfee Agent (MA) Man-in-the-Middle Attack Vulnerability

McAfee Agent is prone to mitm attack vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mcafee:mcafeeagent";...

The vulnerability of the McAfee VirusScan Enterprise anti-virus software allows a hacker to obtain confidential information.

The vulnerability of the McAfee VirusScan Enterprise antivirus software arises from the failure to handle CRLF sequences in headers properly. Exploiting this vulnerability can allow a remote attacker to obtain confidential information...

The vulnerability of the McAfee VirusScan Enterprise anti-virus software allows a perpetrator to compromise the confidentiality of information.

The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality of information...

The vulnerability of the McAfee VirusScan Enterprise anti-virus software allows a intruder to inject arbitrary Web or HTML code.

The vulnerability of the McAfee VirusScan Enterprise antivirus software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

The vulnerability of the McAfee VirusScan Enterprise anti-virus software allows a hacker to trigger a service failure or cause other damage to the system.

The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures or otherwise affect the system through a specified URL parameter...

The vulnerability of the McAfee VirusScan Enterprise anti-virus software allows a hacker to bypass the sandbox mechanism or cause a service failure.

The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to bypass the sandbox mechanism or trigger a service failure through a specially crafted HTTP request...

The vulnerability of the McAfee VirusScan Enterprise anti-virus software allows a hacker to gain access to file readings.

The vulnerability of the McAfee VirusScan Enterprise antivirus software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to remotely read files from the web server...

McAfee ePolicy Orchestrator DataChannel GUID SQL Injection (CVE-2016-8027)

An SQL injection vulnerability exists in McAfee ePolicy Orchestrator. The vulnerability is due to insufficient input validation on the GUID parameter. A remote unauthenticated attacker could exploit this vulnerability by sending a specially crafted request to the affected server. Successful...

McAfee Security Scan Plus File Execution Vulnerability - Windows

McAfee Security Scan Plus is prone to file execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...