PT-2020-5633 · Mcafee · Mcafee Endpoint Security

Published 2020-04-15 · Updated 2020-04-20 · CVE-2020-7261

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security (ENS) versions prior to 10.7.0 February 2020 Update

Description The issue is related to a Buffer Overflow via Environment Variables vulnerability in the AMSI component of McAfee Endpoint Security. This vulnerability can be exploited by local users to disable Endpoint Security through carefully crafted user input.

Recommendations For versions prior to 10.7.0 February 2020 Update, update to the February 2020 Update or a later version to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

BDU:2021-01333

CVE-2020-7261

Affected Products

Mcafee Endpoint Security

References · 6

• https://osv.dev/vulnerability/CVE-2020-7261 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7261 · Security Note
• https://bdu.fstec.ru/vul/2021-01333 · Security Note
• https://t.me/cvenotify/2757 · Telegram Post
• https://kc.mcafee.com/corporate/index?page=content&id=SB10309 · Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10309 · Note