PT-2020-19545

CVE-2020-7312

·

Published

2020-09-10

·

Updated

2020-09-15

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions McAfee Agent (MA) for Windows versions prior to 5.6.6
Description The issue allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder. This is due to a DLL Search Order Hijacking Vulnerability in the installer.
Recommendations For versions prior to 5.6.6, update to version 5.6.6 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-427: Uncontrolled Search Path Element
Related identifiers
CVE-2020-7312
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com