CVE-2015-8772

Name of the Vulnerable Software and Affected Versions McAfee File Lock versions 5.x

Description The issue allows local users to obtain sensitive information from kernel memory or cause a denial of service, resulting in a system crash. This is achieved via a large VERIFY INFORMATION.Length value in an IOCTL DISK VERIFY ioctl call to the McPvDrv.sys driver.

Recommendations For McAfee File Lock version 5.x, update the McPvDrv.sys driver to a version that does not allow large VERIFY INFORMATION.Length values in an IOCTL DISK VERIFY ioctl call.