CVE-2015-1305 McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted (1) 0x00224014 or (2) 0x0022c018 I...
MediumCVSS 6.9
EPSS 0.88%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted (1) 0x00224014 or (2) 0x0022c018 IOCTL call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee data loss prevention endpoint | <= 9.3.300 | No fix listed |
References
- packetstormsecurity.com exploit
- 35953 exploit
- www.greyhathacker.net exploit
- 117345 vdb-entry
- mcafee-dlp-cve20151305-priv-esc(100602) vdb-entry
- kc.mcafee.com vendor-advisory