CVE-2019-3646

McAfee Total Protection - Free Antivirus Trial: DLL Search Order Hijacking vulnerability

Medium · published September 13, 2019

CVSS v3.1
6.9
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights.

The record
Technical detail
CVSS v3.1
6.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.01479 · 73.7th percentile
Published
2019-09-13T13:05Z
EPSS history
Timeline
  • 13 SEP 13:05Z
    McAfee Total Protection - Free Antivirus Trial: DLL Search Order Hijacking vulnerability
    cvelistv5