Логотип exploitDog
bind:CVE-2021-31840
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-31840

Количество 3

Количество 3

nvd логотип

CVE-2021-31840

больше 4 лет назад

A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. This would result in the user gaining elevated permissions and being able to execute arbitrary code.

CVSS3: 7.3
EPSS: Низкий
github логотип

GHSA-8r98-33h6-f6hq

больше 3 лет назад

A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. This would result in the user gaining elevated permissions and being able to execute arbitrary code.

EPSS: Низкий
fstec логотип

BDU:2021-06156

больше 4 лет назад

Уязвимость антивирусного программного средства McAfee Agent, связанная с недостатками механизма вызовов системных библиотек, позволяющая нарушителю выполнить атаку предварительной загрузки DLL

CVSS3: 7.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-31840

A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. This would result in the user gaining elevated permissions and being able to execute arbitrary code.

CVSS3: 7.3
0%
Низкий
больше 4 лет назад
github логотип
GHSA-8r98-33h6-f6hq

A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. This would result in the user gaining elevated permissions and being able to execute arbitrary code.

0%
Низкий
больше 3 лет назад
fstec логотип
BDU:2021-06156

Уязвимость антивирусного программного средства McAfee Agent, связанная с недостатками механизма вызовов системных библиотек, позволяющая нарушителю выполнить атаку предварительной загрузки DLL

CVSS3: 7.3
0%
Низкий
больше 4 лет назад

Уязвимостей на страницу