CVE-2015-8577

The Buffer Overflow Protection (BOP) feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.6 UNKNOWN
LOCAL
HIGH
AV:L/AC:H/Au:N/C:P/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
VendorProductVersion
mcafeevirusscan_enterprise
𝑥
≤ 8.8.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://blog.ensilo.com/the-av-vulnerability-that-bypasses-mitigations
http://breakingmalware.com/vulnerabilities/sedating-watchdog-abusing-security-products-bypass-mitigations/
http://www.securityfocus.com/bid/78810
https://kc.mcafee.com/corporate/index?page=content&id=SB10142
http://blog.ensilo.com/the-av-vulnerability-that-bypasses-mitigations
http://breakingmalware.com/vulnerabilities/sedating-watchdog-abusing-security-products-bypass-mitigations/
http://www.securityfocus.com/bid/78810
https://kc.mcafee.com/corporate/index?page=content&id=SB10142