What is CVE-2015-8993?

CVE-2015-8993 is a high-severity vulnerability in Intel Cloudav (Beta), classified under CWE-264. CVSS score: 7.0/10. Published 2017-03-14.

How severe is CVE-2015-8993?

High severity. CVSS v3 base score is 7.0 out of 10.

Vulnerability in Intel Cloudav (Beta)

CVE-2015-8993

Malicious file execution vulnerability in Intel Security CloudAV (Beta) before 0.5.0.151.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation.

EPSS: 0.003 (23.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Intel Cloudav (Beta) — versions before 0.5.0.151.3
Mcafee Cloud_av
Mcafee Security_scan_plus
Mcafee Security_webadvisor — versions 3.7.2, 4.0.1, 4.0.2

Weakness classification (CWE)

CWE-264

References

secure@intel.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2015-8993?: CVE-2015-8993 is a high-severity vulnerability in Intel Cloudav (Beta), classified under CWE-264. CVSS score: 7.0/10. Published 2017-03-14.
How severe is CVE-2015-8993?: High severity. CVSS v3 base score is 7.0 out of 10.