Mcafee Virusscan Enterprise vulnerabilities

CVE-2007-1538 [HIGH] CVE-2007-1538: McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, whi McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in (1) HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection or (2) HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Entreprise\CurrentVersion. NOTE: this issue has been disput

CVE-2020-7337 [MEDIUM] CWE-732 CVE-2020-7337: Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise ( Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of the Code Integrity checks.

CVE-2019-3588 [MEDIUM] CWE-269 CVE-2019-3588: Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Ente Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked.

CVE-2016-8030 [MEDIUM] CWE-119 CVE-2016-8030: A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link.

CVE-2018-6674 [LOW] CWE-264 CVE-2018-6674: Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Ente Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user's privileges).

CVE-2015-8577 [LOW] CWE-264 CVE-2015-8577: The Buffer Overflow Protection (BOP) feature in McAfee VirusScan Enterprise before 8.8 Patch 6 alloc The Buffer Overflow Protection (BOP) feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors.

CVE-2006-4886 [LOW] CVE-2006-4886: The VirusScan On-Access Scan component in McAfee VirusScan Enterprise 7.1.0 and Scan Engine 4.4.00 a The VirusScan On-Access Scan component in McAfee VirusScan Enterprise 7.1.0 and Scan Engine 4.4.00 allows local privileged users to bypass security restrictions and disable the On-Access Scan option by opening the program via the task bar and quickly clicking the Disable button, possibly due to an interface-related race condition.

CVE-2010-5143 [LOW] CWE-264 CVE-2010-5143: McAfee VirusScan Enterprise before 8.8 allows local users to disable the product by leveraging admin McAfee VirusScan Enterprise before 8.8 allows local users to disable the product by leveraging administrative privileges to execute an unspecified Metasploit Framework module.