VULHUB ™

Reportedly McAfee VirusScan is affected by a local privilege escalation vulnerability. This issue is caused by a design error that causes the application to fail to drop SYSTEM privileges after acquiring them. A local attacker may leverage this issue to escalate their privileges to SYSTEM on an affected Microsoft Windows computer. ** UPDATE: Additional versions later than 4.5.1 were added to this BID due to a report that a similar attack was possible against those versions. These versions have since been removed from the BID due to subsequent reports that indicated this attack was not possible against the reported versions.

Reportedly McAfee VirusScan is affected by a local privilege escalation vulnerability. This issue is caused by a design error that causes the application to fail to drop SYSTEM privileges after acquiring them. A local attacker may leverage this issue to escalate their privileges to SYSTEM on an affected Microsoft Windows computer. ** UPDATE: Additional versions later than 4.5.1 were added to this BID due to a report that a similar attack was possible against those versions. These versions have since been removed from the BID due to subsequent reports that indicated this attack was not possible against the reported versions.