CVE-2020-7337

CVE-2020-7337 affects McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16, where an incorrect permission assignment for a critical resource enables local administrators to bypass local security protections by manipulating Code Integrity checks tied to Windows Defender Application Control. The...

CVE-2016-8016

CVE-2016-8016 affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability is an information disclosure via the web interface: an authenticated remote attacker can use a URL parameter to determine the existence of unauthorized files on the system. Connected sources al...

CVE-2016-8024

The CVE-2016-8024 entry affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability is HTTP Response Splitting caused by improper neutralization of CRLF sequences in HTTP headers, enabling a remote unauthenticated attacker to influence server responses and potentiall...

CVE-2016-3984

CVE-2016-3984 affects McAfee VirusScan Console and multiple McAfee components (MAR, MA, DXL, DLPe, MDC, ENS, IPS, VSE) on Windows. Local administrators can bypass self-protection rules and disable the antivirus engine by modifying registry keys. Impact: partial to full antivirus disablement; CVSS...

CVE-2016-8025

CVE-2016-8025 affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability is a SQL injection in the web interface exposed via crafting the HTTP request parameter (mon:0), allowing an authenticated remote attacker to manipulate or disclose data stored in the backend S...

CVE-2016-8020

Affected software : McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. Vulnerability : CVE-2016-8020 — improper control of generation of code, allowing an authenticated remote attacker to execute arbitrary code via a crafted HTTP request parameter. Impact : remote code execution with...

CVE-2016-8021

CVE-2016-8021 affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability is in the web interface’s verification of cryptographic signatures, allowing a remote authenticated attacker to spoof the update server and execute arbitrary code via a crafted input file. Impa...

CVE-2020-7267

Affected software: McAfee VirusScan Enterprise for Linux (VSEL) prior to 2.0.3 Hotfix 2635000. Vulnerability details: Privilege escalation via manipulation of symbolic links to redirect a McAfee delete operation to an unintended file. The root cause is the handling of delete actions through symli...

CVE-2016-8023

CVE-2016-8023 affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The flaw is an authentication bypass in the web interface caused by improper handling of the nailsSessionId cookie, enabling an unauthenticated, remote attacker to bypass server authentication by manipulating/gu...

CVE-2016-8030

McAfee VirusScan Enterprise for Windows is affected by CVE-2016-8030: memory corruption in the Scriptscan COM Object present in VSE 8.8 Patch 8 and earlier. An unauthenticated remote attacker can exploit a specially crafted HTML link to cause a Denial of Service on the active Internet Explorer ta...

CVE-2016-4534

The CVE-2016-4534 entry concerns McAfee VirusScan Enterprise

CVE-2016-8019

CVE-2016-8019 is an XSS vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 and earlier. The issue affects the web interface where user input passed through tplt parameters (notably info:7/info:5 in NailsConfig.html or MonitorHost.html) can be crafted by an unauthenticated rem...

CVE-2019-3585

CVE-2019-3585 affects McAfee VirusScan Enterprise (VSE) 8.8 before Patch 14. The issue is a Privilege Escalation in the Microsoft Windows client (McTray.exe) where local attackers can interact with the On-Access Scan Messages – Threat Alert Window with elevated privileges by running McAfee Tray w...

CVE-2020-7280

CVE-2020-7280 : Privilege escalation in McAfee VirusScan Enterprise (VSE) versions prior to 8.8 Patch 15. The issue arises during daily DAT updates where an attacker can alter the target of symbolic links, enabling local users to delete or create files they normally cannot. Timing-dependent vulne...

CVE-2016-8018

CVE-2016-8018 affects McAfee VirusScan Enterprise for Linux (VSEL) up to version 2.0.3. The issue is a cross-site request forgery (CSRF) vulnerability in the web interface that can allow an authenticated remote attacker to execute unauthorized commands via crafted input. Connected documents corro...

CVE-2018-6674

The CVE-2018-6674 issue affects McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13, specifically the McTray.exe component. The root cause is privilege escalation through the ability to spawn unrelated processes with elevated privileges when McTray.exe is granted elevated privileges by the sy...

CVE-2020-7266

CVE-2020-7266 affects McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778. A local privilege escalation exists where an attacker can delete restricted files by abusing symbolic links to redirect a McAfee delete action to an unintended file. Root cause: manipulation o...

CVE-2016-8017

CVE-2016-8017 is a concrete vulnerability in McAfee VirusScan Enterprise for Linux (VSEL) up to version 2.0.3 where the web interface handles special elements (tplt) in user input, enabling an authenticated remote attacker to read files on the webserver. The underlying issue is a Special Element ...

CVE-2010-3496

Affected software: McAfee VirusScan Enterprise 8.5i and 8.7i. Vulnerability cause: improper interaction with the processing of hcp:// URLs by the Microsoft Help and Support Center, per CVE-2010-3496. Impact: remote attackers could execute arbitrary code via malware that is detected by the product...

CVE-2010-5143

CVE-2010-5143 affects McAfee VirusScan Enterprise prior to 8.8. Local users with administrative privileges can disable the product by triggering an unspecified Metasploit Framework module. Multiple scanners (NVD, Red Hat, Nessus/OpenVAS entries) corroborate a local-privilege-escalation vector lea...

CVE-2016-8022

CVE-2016-8022 affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability enables authentication bypass via the web interface by manipulating authentication cookies; an unauthenticated remote attacker could bypass login and potentially execute code or cause a denial ...

CVE-2019-3588

CVE-2019-3588 affects McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14. The issue is a privileges escalation in the Windows client (McTray.exe) that allows unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked. Impact ...

CVE-2009-1348

CVE-2009-1348 affects McAfee antivirus products (VirusScan, Total Protection, Internet Security, SecurityShield for ISA Server/SharePoint, Security for Email Servers/Email Gateway, Active Virus Defense, etc.). The issue is a virus-detection bypass caused by malformed archive metadata in ZIP/RAR f...

CVE-2015-8577

Summary: CVE-2015-8577 affects McAfee VirusScan Enterprise prior to 8.8 Patch 6. The vulnerability lies in the Buffer Overflow Protection (BOP) feature, which allocates memory with Read/Write/Execute (RWX) permissions at predictable addresses on 32‑bit systems while protecting another application...

CVE-2007-1538

The CVE-2007-1538 entry concerns McAfee VirusScan Enterprise 8.5.0.i, where insecure permissions on Windows Registry keys (HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection and HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Enterprise\CurrentVersion) allow local users to bypass l...

CVE-2009-5118

CVE-2009-5118 affects McAfee VirusScan Enterprise; untrusted search path allows local privilege escalation via a Trojan DLL when scanning a document on a remote share, in versions before 8.7i. The vulnerability stems from insecure DLL search behavior (lookups in the current working directory). Op...

CVE-2005-4505

CVE-2005-4505 describes an unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5). The underlying issue is an unquoted Program Files path that causes naPrdMgr.exe to execute EntVUtil.EXE, enabling local users to gain privileges via a malici...

CVE-2006-4886

CVE-2006-4886 affects McAfee VirusScan Enterprise 7.1.0 and VirusScan Scan Engine 4.4.00. The On-Access Scan component can be bypassed by local attackers who open the program from the task bar and quickly click Disable, due to an interface-related race condition. This allows bypass of security re...

CVE-2007-2152

The CVE-2007-2152 entry affects McAfee VirusScan Enterprise (On-Access Scanner). A buffer overflow is triggered by a long filename containing multi-byte (Unicode) characters, enabling user‑assisted remote code execution. This affects the On-Access Scanner component prior to 8.0i Patch 12. Remedia...