Permissions, Privileges, and Access Controls in McAfee products - CVE-2019-3648
Published: November 13, 2019
Vulnerability identifier: #VU22745
CSH Severity: High
CVSS v4: 7.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-3648
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to escalate privileges on the system.
The vulnerability exists due to the affected software does not check if the third-party files have the correct digital signatures and are loaded from the correct location. A remote administrator can load an unsigned arbitrary DLL, execute arbitrary code on the target system and escalate to SYSTEM privileges.
Affected software
McAfee Total Protection (MTP)
McAfee Anti-Virus Plus (AVP)
McAfee Internet Security (MIS)
McAfee Anti-Virus Plus (AVP)
McAfee Internet Security (MIS)
How to mitigate CVE-2019-3648
Install updates from vendor's website.
McAfee Total Protection (MTP) - update to 16.0.R22 Refresh 1
McAfee Anti-Virus Plus (AVP) - update to 16.0.R22 Refresh 1
McAfee Internet Security (MIS) - update to 16.0.R22 Refresh 1
McAfee Anti-Virus Plus (AVP) - update to 16.0.R22 Refresh 1
McAfee Internet Security (MIS) - update to 16.0.R22 Refresh 1
External References
- https://gbhackers.com/vulnerability-mcafee-antivirus/
- https://service.mcafee.com/webcenter/portal/oracle/webcenter/page/scopedMD/s55728c97_466d_4ddb_952d_05484ea932c6/Page29.jspx?wc.contextURL=%2Fspaces%2Fcp&articleId=TS102984&_afrLoop=518789560755102&leftWidth=0%25&showFooter=false&showHeader=false&rightWidth=0%25¢erWidth=100%25#!%40%40%3FshowFooter%3Dfalse%26_afrLoop%3D518789560755102%26articleId%3DTS102984%26leftWidth%3D0%2525%26showHeader%3Dfalse%26wc.contextURL%3D%252Fspaces%252Fcp%26rightWidth%3D0%2525%26centerWidth%3D100%2525%26_adf.ctrl-state%3D17dpx1xd3k_75