CVE-2016-8009
Summary
| CVE | CVE-2016-8009 |
|---|---|
| State | PUBLISHED |
| Assigner | intel |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-03-14 22:59:00 UTC |
| Updated | 2025-04-20 01:37:25 UTC |
| Description | Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code execution via an unauthorized use of IOCTL call. |
Risk And Classification
Primary CVSS: v3.0 7.8 HIGH from [email protected]
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Problem Types: CWE-264 | Privilege escalation vulnerability
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 7.8 | HIGH | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | [email protected] | Primary | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
CVSS v3.0 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:L/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mcafee | Application Control | 6.0.0 | All | All | All |
| Application | Mcafee | Application Control | 6.1.0 | All | All | All |
| Application | Mcafee | Application Control | 6.1.1 | All | All | All |
| Application | Mcafee | Application Control | 6.1.2 | All | All | All |
| Application | Mcafee | Application Control | 6.1.3 | All | All | All |
| Application | Mcafee | Application Control | 6.2.0 | All | All | All |
| Application | Mcafee | Application Control | 7.0.0 | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Intel | McAfee Application Control MAC | affected 7.0 and 6.x versions | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| McAfee Corporate KB - McAfee Security Bulletin: Application Control update fixes a privilege escalation vulnerability (CVE-2016-8009) SB10175 | af854a3a-2127-422b-91ae-364da2661108 | kc.mcafee.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.