CVE-2019-3646

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights.

CVSS v3 6.5 MEDIUM
CVSS v2.0 6.0 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.6 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability : 6.8 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://service.mcafee.com/FAQDocument.aspx?&id=TS102968

Configurations

Configuration 1 (hide)

cpe:2.3:a:mcafee:total_protection:*:*:*:*:free_trial:*:*:*

History

07 Nov 2023, 03:10

Type	Values Removed	Values Added
References	~~(CONFIRM) http://service.mcafee.com/FAQDocument.aspx?&id=TS102968 - Patch, Vendor Advisory~~	() http://service.mcafee.com/FAQDocument.aspx?&id=TS102968 -

Information

Published : 2019-09-13 13:15

Updated : 2024-02-28 17:08

NVD link : CVE-2019-3646

Mitre link : CVE-2019-3646

CVE.ORG link : CVE-2019-3646

JSON object : View

Products Affected

mcafee

total_protection

CWE

CWE-426

Untrusted Search Path

CWE-714

OWASP Top Ten 2007 Category A3 - Malicious File Execution

{"id": "CVE-2019-3646", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.6}, {"type": "Secondary", "source": "trellixpsirt@trellix.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.9, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 5.3, "exploitabilityScore": 1.1}]}, "published": "2019-09-13T13:15:11.620", "references": [{"url": "http://service.mcafee.com/FAQDocument.aspx?&id=TS102968", "source": "trellixpsirt@trellix.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-426"}]}, {"type": "Secondary", "source": "trellixpsirt@trellix.com", "description": [{"lang": "en", "value": "CWE-714"}]}], "descriptions": [{"lang": "en", "value": "DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights."}, {"lang": "es", "value": "Una vulnerabilidad de Secuestro de \u00d3rdenes de B\u00fasqueda de DLL en cliente Microsoft Windows en McAfee Total Protection (MTP) Free Antivirus Trial versi\u00f3n 16.0.R18 y anteriores, permite a usuarios locales ejecutar c\u00f3digo arbitrario mediante la ejecuci\u00f3n desde una carpeta comprometida colocada por parte de un atacante con derechos de administrador."}], "lastModified": "2023-11-07T03:10:06.603", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mcafee:total_protection:*:*:*:*:free_trial:*:*:*", "vulnerable": true, "matchCriteriaId": "958A9364-06E1-4E80-A191-86BE8DDB5CF9", "versionEndIncluding": "16.0.r18"}], "operator": "OR"}]}], "sourceIdentifier": "trellixpsirt@trellix.com"}