Vulnerability Description
DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder.
CVSS Score
7.8
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mcafee | Mcafee Agent | < 5.6.6 |
Related Weaknesses (CWE)
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10325
- https://kc.mcafee.com/corporate/index?page=content&id=SB10325
FAQ
What is CVE-2020-7312?
CVE-2020-7312 is a vulnerability with a CVSS score of 7.8 (HIGH). DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code and escalate privileges via execution from a comp...
How severe is CVE-2020-7312?
CVE-2020-7312 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7312?
Check the references section above for vendor advisories and patch information. Affected products include: Mcafee Mcafee Agent.