Vulnerability in Mcafee Data Loss Prevention Endpoint
CVE-2015-1305
McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted (1) 0x00224014 or (2) 0x0022c018 IOCTL call.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 6.9 (Medium). Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.009 (57.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 58th percentile — 57.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.009 · newest: 0.009 · change: 0.000
Affected products
Weakness classification (CWE)
References
- exchange.xforce.ibmcloud.com/vulnerabilities/100602 (vdb-entry)
- www.greyhathacker.net/ (Exploit)
- www.osvdb.org/show/osvdb/117345 (vdb-entry)
- www.exploit-db.com/exploits/35953 (Exploit, exploit)
- kc.mcafee.com/corporate/index (Vendor Advisory)
- packetstormsecurity.com/files/130177/McAfee-Data-Loss-Prevention-Endpoint-Privi… (Exploit)