Title

McAfee Application Control Local Privilege Escalation Vulnerability (Cat II impact)

Discussion

McAfee has released a security bulletin addressing a vulnerability in McAfee Application Control (MAC). McAfee Application Control is designed as a centrally managed Whitelist and thwarts advanced persistent threats, without requiring signature updates or labor-intensive list. To exploit this vulnerability, an attacker would send a malicious request to the system. If successfully exploited, an attacker could execute arbitrary code on vulnerable installations of McAfee Application Control, causing a denial of service or privilege escalation.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-65029

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.