CVE-2016-8032

Summary

CVE	CVE-2016-8032
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2017-03-31 21:59:00 UTC
Updated	2017-07-12 01:29:00 UTC
Description	Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local attackers to bypass local security protection via a crafted input file.

Risk And Classification

Problem Types: CWE-284

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Mcafee	Anti-malware Scan Engine	5200	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5200	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5200	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5300	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5300	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5300	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5400	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5400	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5400	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5500	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5500	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5500	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5600	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5600	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5600	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5700	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5700	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5700	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5800	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5800	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5800	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5200	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5200	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5200	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5300	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5300	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5300	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5400	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5400	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5400	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5500	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5500	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5500	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5600	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5600	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5600	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5700	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5700	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5700	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5800	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5800	All	All	All
Application	Mcafee	Anti-malware Scan Engine	5800	All	All	All

References

Reference	Source	Link	Tags
McAfee Anti-Malware Scan Engine CVE-2016-8032 Multiple Local Security Bypass Vulnerabilities	BID	www.securityfocus.com	Third Party Advisory, VDB Entry
McAfee ePolicy Orchestrator Flaws in Anti-Malware Scan Engine Lets Local Users Cause Denial of Service Conditions - SecurityTracker	SECTRACK	www.securitytracker.com
McAfee - Security Bulletin: 5900 Anti-Malware Scan Engine update fixes a 64-bit engine crash issue (CVE-2016-8032)	CONFIRM	kc.mcafee.com	Patch, Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.