PT-2019-5831 · Mcafee+1 · Mcafee Techcheck+1

Published 2019-12-10 · Updated 2019-12-16 · CVE-2019-3667

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Tech Check versions 3.0.0.17 and earlier

Description The issue is related to a DLL Search Order Hijacking vulnerability in the Microsoft Windows client component of McAfee Tech Check. This vulnerability allows local users to execute arbitrary code by placing a malicious local folder in a specific location. The exploitation of this vulnerability is connected to the loading of a non-existent dynamic library, which can enable an attacker to execute arbitrary code.

Recommendations For McAfee Tech Check versions 3.0.0.17 and earlier, consider restricting access to the local folder where the dynamic library is loaded until a patch is available. As a temporary workaround, avoid using the affected McAfee Tech Check component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2021-03217

CVE-2019-3667

Affected Products

Mcafee Techcheck

Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-3667 · Security Note
• https://bdu.fstec.ru/vul/2021-03217 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3667 · Vendor Advisory
• https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102996 · Note