Vulnerabilities > Mcafee > Virusscan Enterprise > 8.7i

DATE CVE VULNERABILITY TITLE RISK
2020-12-09 CVE-2020-7337 Incorrect Permission Assignment for Critical Resource vulnerability in Mcafee Virusscan Enterprise
Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of the Code Integrity checks.
local
low complexity
mcafee CWE-732
6.7
2015-12-16 CVE-2015-8577 Permissions, Privileges, and Access Controls vulnerability in Mcafee Virusscan Enterprise
The Buffer Overflow Protection (BOP) feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors.
local
high complexity
mcafee CWE-264
2.6
2012-08-22 CVE-2010-5143 Permissions, Privileges, and Access Controls vulnerability in Mcafee Virusscan Enterprise
McAfee VirusScan Enterprise before 8.8 allows local users to disable the product by leveraging administrative privileges to execute an unspecified Metasploit Framework module.
local
high complexity
mcafee CWE-264
2.6
2012-08-22 CVE-2010-3496 Permissions, Privileges, and Access Controls vulnerability in Mcafee Virusscan Enterprise 8.5I/8.7I
McAfee VirusScan Enterprise 8.5i and 8.7i does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution.
network
low complexity
mcafee CWE-264
6.4