mcafee-total-protection
修正版
16.0.R18
CVE-2019-3587 is a DLL Search Order Hijacking vulnerability affecting Microsoft Windows client systems running McAfee Total Protection (MTP) versions prior to 16.0.R18. This flaw allows a local attacker to execute arbitrary code by manipulating the order in which the system searches for DLL files. The vulnerability is particularly concerning due to its potential for privilege escalation and system compromise.
An attacker can exploit CVE-2019-3587 by placing a malicious DLL file in a location that the system searches before the legitimate DLL. When an application attempts to load the legitimate DLL, it will instead load the attacker's malicious DLL, allowing the attacker to execute arbitrary code in the context of the application. This could lead to complete system compromise, data theft, or the installation of malware. The blast radius is limited to systems running vulnerable versions of McAfee Total Protection.
CVE-2019-3587 was published on January 23, 2019. The vulnerability has a high CVSS score, indicating a significant risk. While no widespread exploitation has been reported, DLL Search Order Hijacking vulnerabilities are often targeted by attackers. Check McAfee's security advisories for further details and updates.
エクスプロイト状況
EPSS
0.44% (63% パーセンタイル)
CVSS ベクトル
The primary mitigation for CVE-2019-3587 is to upgrade McAfee Total Protection to version 16.0.R18 or later. If an immediate upgrade is not possible, consider implementing stricter file system permissions to prevent attackers from placing malicious DLLs in vulnerable locations. Regularly scan the system for suspicious files and monitor system logs for unusual activity. After upgrading, confirm the fix by verifying the version number of McAfee Total Protection.
Actualice McAfee Total Protection a la versión 16.0.18 o posterior. Esto solucionará la vulnerabilidad de secuestro del orden de búsqueda de DLL.
脆弱性分析と重要アラートをメールでお届けします。
It's a DLL Search Order Hijacking vulnerability in McAfee Total Protection allowing local code execution.
If you're using McAfee Total Protection versions prior to 16.0.R18, you are vulnerable.
Upgrade to McAfee Total Protection version 16.0.R18 or later.
While no widespread exploitation is reported, DLL Hijacking vulnerabilities are often targeted.
Refer to McAfee's security advisories and the NVD entry for CVE-2019-3587 for detailed information.