// For flags

CVE-2014-9920

 

Severity Score

5.9
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0.1 before hotfix 9068, 6.1.0 before hotfix 692, 6.1.1 before hotfix 399, 6.1.2 before hotfix 426, and 6.1.3 before hotfix 357 and earlier allows attackers to create a malformed Windows binary that is considered non-executable and is not protected through the whitelisting protection feature via a specific set of circumstances.

Ejecución no autorizada de vulnerabilidad binaria en McAfee (ahora Intel Security) McAfee Application Control (MAC) 6.0.0 en versiones anteriores a hotfix 9726, 6.0.1 en versiones anteriores a hotfix 9068, 6.1.0 en versiones anteriores a hotfix 692, 6.1.1 en versiones anteriores a hotfix 399, 6.1.2 en versiones anteriores a hotfix 426 y 6.1.3 en versiones anteriores a hotfix 357 y versiones anteriores permite a atacantes crear un binario de Windows malformado que es considerado no ejecutable y no está protegido a través de la característica de protección de lista blanca a través de un conjunto específico de circunstancias.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2017-02-27 CVE Reserved
  • 2017-03-14 CVE Published
  • 2023-11-25 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-284: Improper Access Control
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Mcafee
Search vendor "Mcafee"
Application Control
Search vendor "Mcafee" for product "Application Control"
6.0.0
Search vendor "Mcafee" for product "Application Control" and version "6.0.0"
-
Affected
Mcafee
Search vendor "Mcafee"
Application Control
Search vendor "Mcafee" for product "Application Control"
6.0.1
Search vendor "Mcafee" for product "Application Control" and version "6.0.1"
-
Affected
Mcafee
Search vendor "Mcafee"
Application Control
Search vendor "Mcafee" for product "Application Control"
6.1.0
Search vendor "Mcafee" for product "Application Control" and version "6.1.0"
-
Affected
Mcafee
Search vendor "Mcafee"
Application Control
Search vendor "Mcafee" for product "Application Control"
6.1.1
Search vendor "Mcafee" for product "Application Control" and version "6.1.1"
-
Affected
Mcafee
Search vendor "Mcafee"
Application Control
Search vendor "Mcafee" for product "Application Control"
6.1.2
Search vendor "Mcafee" for product "Application Control" and version "6.1.2"
-
Affected
Mcafee
Search vendor "Mcafee"
Application Control
Search vendor "Mcafee" for product "Application Control"
6.1.3
Search vendor "Mcafee" for product "Application Control" and version "6.1.3"
-
Affected