PT-2023-1883 · Mcafee · Mcafee Total Protection

CVE-2023-24578 · Publicado 2023-03-13 · Atualizado 2025-02-27

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions McAfee Total Protection versions prior to 16.0.49

Description The issue is related to an uncontrolled search path element in McAfee Total Protection, which can be exploited to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks.

Recommendations For versions prior to 16.0.49, update to version 16.0.49 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

BDU:2023-01484

CVE-2023-24578

Produtos afetados

Mcafee Total Protection

Referências · 11

• https://t.me/cibsecurity/59881 · Publicação no Telegram
• https://t.me/cvenotify/112693 · Publicação no Telegram
• https://mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html · Aviso do Fabricante
• https://vuldb.com/ru/?id.222898 · Nota
• https://osv.dev/vulnerability/CVE-2023-24578 · Aviso do Fabricante
• https://mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-24578 · Nota de Segurança
• https://mcafee.com/support/?locale=en-US&articleId=TS103397&page=shell&shell=article-view · Nota
• https://mcafee.com/support/?locale=en-US&articleId=TS103397&page=shell&shell=article-view · Nota
• https://bdu.fstec.ru/vul/2023-01484 · Nota de Segurança
• https://mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view · Nota