CVE-2021-31844
High
Description
A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.200 allows a local attacker to execute arbitrary code with elevated privileges through placing carefully constructed Ami Pro (.sam) files onto the local system and triggering a DLP Endpoint scan through accessing a file. This is caused by the destination buffer being of fixed size and incorrect checks being made on the source size.
SeverityHigh
CVSS8.2
Exploit probability—
ProductMcafee Data Loss Prevention Endpoint
PublishedSep 17, 2021
First seenSep 17, 2021
Weakness typeCWE-120CWE-120
How to fix
Update
- mcafee data_loss_prevention_endpoint11.6.200 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee data_loss_prevention_endpoint | v < 11.6.200 | 11.6.200 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.