CVE-2015-8772

CRITICAL · 9.1 CVSS Gepubliceerd: 29-01-2016 CWE-19

Beschrijving

McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial of service (system crash) via a large VERIFY_INFORMATION.Length value in an IOCTL_DISK_VERIFY ioctl call.

Vendors

Mcafee

Affected products

File Lock

References

seclists.org
www.nettitude.co.uk