What is CVE-2019-3667?

CVE-2019-3667 is a medium-severity vulnerability in Mcafee Techcheck, classified under Uncontrolled Search Path Element. CVSS score: 6.6/10. Published 2019-12-11.

How severe is CVE-2019-3667?

Medium severity. CVSS v3 base score is 6.6 out of 10.

Vulnerability in Mcafee Techcheck

CVE-2019-3667

DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbitrary code via the local folder placed there by an attacker.

EPSS: 0.003 (26.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L.

Affected products

Mcafee Techcheck
Mcafee, Llc Mcafee Techcheck — versions unspecified

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2019-3667?: CVE-2019-3667 is a medium-severity vulnerability in Mcafee Techcheck, classified under Uncontrolled Search Path Element. CVSS score: 6.6/10. Published 2019-12-11.
How severe is CVE-2019-3667?: Medium severity. CVSS v3 base score is 6.6 out of 10.