PT-2017-6409

CVE-2014-9920

·

Published

2017-03-14

·

Updated

2017-03-29

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions McAfee Application Control (MAC) versions 6.0.0 through 6.1.3 before respective hotfixes
Description The issue allows attackers to create a malformed Windows binary that is considered non-executable and bypass the whitelisting protection feature through specific circumstances.
Recommendations For McAfee Application Control (MAC) version 6.0.0, apply hotfix 9726. For McAfee Application Control (MAC) version 6.0.1, apply hotfix 9068. For McAfee Application Control (MAC) version 6.1.0, apply hotfix 692. For McAfee Application Control (MAC) version 6.1.1, apply hotfix 399. For McAfee Application Control (MAC) version 6.1.2, apply hotfix 426. For McAfee Application Control (MAC) version 6.1.3, apply hotfix 357.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-284: Improper Access Control
Related identifiers
CVE-2014-9920
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com