CVEvulnerability

CVE-2019-3652

5.3 MEDIUM Published 2019-10-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-10-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.0 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to get their malicious code installed by the ENS installer via code injection into EPSetup.exe by an attacker with access to the installer.

Affected configurations

• mcafee endpoint security (>= 10.5.0 <= 10.5.5) • mcafee endpoint security (>= 10.6.0 < 10.6.1) • mcafee endpoint security 10.6.1

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References