Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.
References
Link | Resource |
---|---|
https://kc.mcafee.com/corporate/index?page=content&id=SB10335 | Vendor Advisory |
Configurations
Information
Published : 2020-11-12 02:15
Updated : 2020-11-23 13:34
NVD link : CVE-2020-7331
Mitre link : CVE-2020-7331
JSON object : View
CWE
CWE-428
Unquoted Search Path or Element
Products Affected
mcafee
- endpoint_security