CVE-2019-3636

File masquerade attack vulnerability in McAfee Total Protection

State
Published
Severity
7.5 High
Published
Oct 28, 2019
Updated
Sep 17, 2024
Reserved
Jan 3, 2019

Read the record on cve.org

Description

A File Masquerade vulnerability in McAfee Total Protection (MTP) version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:Htrellix

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
McAfee Total ProtectionMcAfee, LCC
  • 16 to before 16.0.R22Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.