Description
The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on Windows allows local administrators to bypass intended self-protection rules and unlock the console window by closing registry handles.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/26000/PD26485/en_US/VSE_8_8_HF1123565_release_notes.pdf ↗
- http://seclists.org/fulldisclosure/2016/Mar/13 ↗
- https://kc.mcafee.com/corporate/index?page=content&id=SB10158 ↗
- https://lab.mediaservice.net/advisory/2016-01-mcafee.txt ↗
- https://www.exploit-db.com/exploits/39531/ ↗
- http://packetstormsecurity.com/files/download/136089/mcafeevses-bypass.html ↗
- http://www.securitytracker.com/id/1035754 ↗