McAfee VirusScan Enterprise up to 8.8 Patch 4 HTML File null pointer dereference

Summaryinfo

A vulnerability was found in McAfee VirusScan Enterprise up to 8.8 Patch 4 and classified as critical. This affects an unknown part of the component HTML File Handler. The manipulation results in null pointer dereference. The attack can be launched remotely. No exploit exists.

Detailsinfo

A vulnerability, which was classified as critical, was found in McAfee VirusScan Enterprise up to 8.8 Patch 4 (Anti-Malware Software). Affected is an unknown code of the component HTML File Handler. The manipulation with an unknown input leads to a null pointer dereference vulnerability. CWE is classifying the issue as CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. This is going to have an impact on confidentiality, integrity, and availability.

The weakness was disclosed 12/13/2016 by Shelby Kaba as VU#535111 as confirmed advisory (CERT.org). The advisory is available at kb.cert.org. The vendor was not involved in the coordination of the public release. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 07/10/2019). The advisory points out:

According to the reporter, when attempting to load the McAfee VirusScan Enterprise DLL via CLSID in an HTML document via Internet Explorer 8, the DLL may crash in such a way as to cause a denial of service or possible code execution. The crash appears to be inconsistently triggered, complicating exploit. It is unclear if other versions of Internet Explorer or Edge are also affected.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at SecurityTracker (ID 1037476†). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Anti-Malware Software

Vendor

• McAfee

Name

• VirusScan Enterprise

Version

• 8.8 Patch 4

License

• commercial

Website

• Vendor: https://www.mcafee.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion