Vulnerabilities > Mcafee > Application Control > 6.0.0

DATE CVE VULNERABILITY TITLE RISK
2017-03-14 CVE-2016-8010 Improper Access Control vulnerability in Mcafee Application Control and Endpoint Security
Application protections bypass vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and earlier and Endpoint Security (ENS) 10.2 and earlier allows local users to bypass local security protection via a command-line utility.
local
low complexity
mcafee CWE-284
4.6
2017-03-14 CVE-2016-8009 Permissions, Privileges, and Access Controls vulnerability in Mcafee Application Control
Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code execution via an unauthorized use of IOCTL call.
local
low complexity
mcafee CWE-264
4.6
2017-03-14 CVE-2014-9920 Improper Access Control vulnerability in Mcafee Application Control
Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0.1 before hotfix 9068, 6.1.0 before hotfix 692, 6.1.1 before hotfix 399, 6.1.2 before hotfix 426, and 6.1.3 before hotfix 357 and earlier allows attackers to create a malformed Windows binary that is considered non-executable and is not protected through the whitelisting protection feature via a specific set of circumstances.
network
mcafee CWE-284
4.3
2012-08-22 CVE-2012-4593 Permissions, Privileges, and Access Controls vulnerability in Mcafee Application Control and Change Control
McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users to bypass authentication by executing a command.
network
low complexity
mcafee CWE-264
5.0