CVE-2015-8991 Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifical...
HighCVSS 7.0
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee security webadvisor | = 3.7.2 | No fix listed |
| mcafee security webadvisor | = 4.0.1 | No fix listed |
| mcafee security webadvisor | = 4.0.2 | No fix listed |
| mcafee cloud av | All versions | No fix listed |
| mcafee security scan plus | All versions | No fix listed |
| intel McAfee Security Scan+ (MSS+) | = before 3.11.266.3 | No fix listed |
References
- service.mcafee.com vendor-advisory