CVE-2015-8986

CVE-2015-8986 is described as a sandbox-detection evasion vulnerability in McAfee/Intel Security Advanced Threat Defense (MATD) versions up to 3.4.2.32. The issue allows malware to detect the sandbox environment and bypass malware detection, resulting in false negatives. The available sources ide...

CVE-2016-8008

CVE-2016-8008 affects McAfee Security Scan Plus (SSP) on Windows 7/10, where SSP version 3.11.376 is vulnerable to privilege escalation. The root cause is a local DLL-loading issue in McUICnt.exe that allows loading a replacement version.dll, enabling a local attacker to gain SYSTEM privileges. M...

CVE-2016-8009

CVE-2016-8009 affects Intel Security McAfee Application Control (MAC) 6.x and 7.0.x. The root cause is unauthorized IOCTL usage that enables local privilege escalation, which can lead to DoS, abnormal behavior, or potentially arbitrary code execution. Public sources describe affected versions (MA...

CVE-2016-8011

The CVE-2016-8011 entry concerns Intel Security McAfee Endpoint Security (ENS) Web Control prior to 10.2.0.408.10. The vulnerability is a cross-site scripting flaw that allows an attacker to inject arbitrary web script or HTML via a crafted website. This affects the Web Control component and coul...

CVE-2013-7460

CVE-2013-7460 is a vulnerability in McAfee Application Control (MAC) 6.1.0 for Linux and earlier that enables write protection and an execution bypass. Authenticated users can change binaries that are part of the Application Control whitelist and allow execution of binaries under specific conditi...

CVE-2015-8988

CVE-2015-8988 concerns an unquoted executable path vulnerability in the McAfee/ePO Deep Command (eDC) Client Management and Gateway components. The affected versions are eDC 2.2 and 2.1. The issue allows an authenticated user to execute arbitrary commands by dropping a malicious file in the unquo...

CVE-2016-8005

CVE-2016-8005 is a file-extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) prior to 7.6.404h1128596. An attacker can bypass proper filename detection by forging a filename with a null byte in the extension, as described in NVD and relatedOpenVAS entries. Affected produ...

CVE-2016-8010

Application protections bypass vulnerability in Intel Security McAfee Application Control MAC 7.0 and earlier and Endpoint Security ENS 10.2 and earlier allows local users to bypass local security protection via a command-line utility...

CVE-2015-8988

Unquoted executable path vulnerability in Client Management and Gateway components in McAfee now Intel Security ePO Deep Command eDC 2.2 and 2.1 allows authenticated users to execute a command of their choice via dropping a malicious file for the path...

CVE-2015-8991

Malicious file execution vulnerability in Intel Security McAfee Security Scan+ MSS+ before 3.11.266.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation...

CVE-2013-7462

A directory traversal vulnerability in the web application in McAfee now Intel Security SaaS Control Console SCC Platform 6.14 before patch 1070, and 6.15 before patch 1076 allows unauthenticated users to view contents of arbitrary system files that did not have file system level read access...

CVE-2013-7461

A write protection and execution bypass vulnerability in McAfee now Intel Security Change Control MCC 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions...

CVE-2016-8005

File extension filtering vulnerability in Intel Security McAfee Email Gateway MEG before 7.6.404h1128596 allows attackers to fail to identify the file name properly via scanning an email with a forged attached filename that uses a null byte within the filename extension...

CVE-2015-8986

Sandbox detection evasion vulnerability in hardware appliances in McAfee now Intel Security Advanced Threat Defense MATD 3.4.2.32 and earlier allows attackers to detect the sandbox environment, then bypass proper malware detection resulting in failure to detect a malware file false-negative via...

CVE-2016-8009

Privilege escalation vulnerability in Intel Security McAfee Application Control MAC 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code execution via an unauthorized use of IOCTL call...

CVE-2016-8007

Authentication bypass vulnerability in McAfee Host Intrusion Prevention Services HIPS 8.0 Patch 7 and earlier allows authenticated users to manipulate the product's registry keys via specific conditions...

CVE-2016-8011

Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security ENS Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site...

CVE-2014-9921

Information disclosure vulnerability in McAfee now Intel Security Cloud Analysis and Deconstructive Services CADS 1.0.0.3x, 1.0.0.4d and earlier allows remote unauthenticated users to view, add, and remove users via a configuration error...

CVE-2013-7460

A write protection and execution bypass vulnerability in McAfee now Intel Security Application Control MAC 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions...

CVE-2014-9920

Unauthorized execution of binary vulnerability in McAfee now Intel Security McAfee Application Control MAC 6.0.0 before hotfix 9726, 6.0.1 before hotfix 9068, 6.1.0 before hotfix 692, 6.1.1 before hotfix 399, 6.1.2 before hotfix 426, and 6.1.3 before hotfix 357 and earlier allows attackers to...