PT-2022-2272 · Mcafee · Mcafee Total Protection

Published 2022-01-31 · Updated 2023-11-16 · CVE-2022-0280

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Total Protection versions prior to 16.0.43

Description A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows, allowing a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of service. The attack exploits the way symlinks are created and how the product works with them.

Recommendations For versions prior to 16.0.43, update to version 16.0.43 or later to resolve the issue. As a temporary workaround, consider disabling the QuickClean feature until a patch is available. Restrict access to sensitive files to minimize the risk of exploitation.

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

BDU:2022-02382

CVE-2022-0280

Affected Products

Mcafee Total Protection

References · 6

• https://service.mcafee.com/?articleId=TS103271&page=shell&shell=article-view · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02382 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-0280 · Security Note
• https://t.me/cibsecurity/38752 · Telegram Post
• https://service.mcafee.com/?articleId=TS103271&page=shell&shell=article-view · Note
• https://t.me/cvenotify/28072 · Telegram Post