CVE-2019-3633

CWE-119 — Buffer Overflow3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 86.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mcafee, LLC Data Loss Prevention (dlpe) FOR WindowsMcafee Data Loss Prevention Endpoint
Timeline
PublishedAug 21
Latest updateMay 24

Description

Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via a carefully constructed message sent to DLPe which bypasses DLPe internal checks and results in DLPe reading unallocated memory.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDmcafee/data_loss_prevention_endpoint11.3.0 — 11.3.2.82

🔴Vulnerability Details

2
GHSA
GHSA-hjqq-29jh-86h4: Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11↗2022-05-24
▶
CVEList
Buffer overflow in DLP Endpoint for Windows↗2019-08-21
▶
CVE-2019-3633 (MEDIUM CVSS 5.5) | Buffer overflow in McAfee Data Loss | cvebase.io