CVE-2019-3652
Summary
| CVE | CVE-2019-3652 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-10-09 16:15:00 UTC |
| Updated | 2023-11-07 03:10:00 UTC |
| Description | Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to get their malicious code installed by the ENS installer via code injection into EPSetup.exe by an attacker with access to the installer. |
Risk And Classification
Problem Types: CWE-94
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mcafee | Endpoint Security | All | All | All | All |
| Application | Mcafee | Endpoint Security | 10.6.1 | - | All | All |
| Application | Mcafee | Endpoint Security | All | All | All | All |
| Application | Mcafee | Endpoint Security | 10.6.1 | - | All | All |
| Application | Mcafee | Endpoint Security | All | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| McAfee Security Bulletin - Endpoint Security for Windows update fixes two vulnerabilities (CVE-2019-3652 and CVE-2019-3653) | kc.mcafee.com | ||
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.