CVE-2020-7261CWE-119

Buffer overwrite in ENS allowed to bypass AMSI protection

Medium · published April 15, 2020

CVSS v3.1
6.1
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to disable Endpoint Security via a carefully crafted user input.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.6th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2020-04-15T11:50Z
EPSS history
Timeline
  • 15 APR 11:50Z
    Buffer overwrite in ENS allowed to bypass AMSI protection
    cvelistv5