CVE-2014-9920

Published: Mar 14, 2017Modified: May 13, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0.1 before hotfix 9068, 6.1.0 before hotfix 692, 6.1.1 before hotfix 399, 6.1.2 before hotfix 426, and 6.1.3 before hotfix 357 and earlier allows attackers to create a malformed Windows binary that is considered non-executable and is not protected through the whitelisting protection feature via a specific set of circumstances.

Affected (6)

Products: Mcafee: Application Control

Mcafee

1 product

Application Control

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Mcafee Application Control	Version 6.0.0
Mcafee Application Control	Version 6.0.1
Mcafee Application Control	Version 6.1.0
Mcafee Application Control	Version 6.1.1
Mcafee Application Control	Version 6.1.2
Mcafee Application Control	Version 6.1.3

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10077

Source: secure@intel.com

Vendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10077

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.