PT-2019-11027 · Microsoft+1 · Windows+1

Published 2019-02-21 · Updated 2023-01-27 · CVE-2018-6687

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: McAfee GetSusp versions 3.0.0.461 and earlier

Description: The issue allows attackers to perform a Denial of Service (DoS) on a manual scan via a specifically crafted file, causing an infinite loop while scanning. GetSusp is a free standalone tool that runs on several versions of Microsoft Windows.

Recommendations: For McAfee GetSusp versions 3.0.0.461 and earlier, consider avoiding the use of manual scans on untrusted or potentially malicious files until a fix is available. As a temporary workaround, restrict the scanning of specifically crafted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2018-6687

Affected Products

Mcafee Getsusp

Windows

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-6687 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6687 · Vendor Advisory
• https://kc.mcafee.com/corporate/index?page=content&id=SB10270 · Note
• http://securityfocus.com/bid/107126 · Note
• https://t.me/cvenotify/42973 · Telegram Post