CVE-2019-3646 MEDIUM

CVE-2019-3646: McAfee Total Protection - Free Antivirus Trial: DLL Search Order Hijacking vulnerability

Vendor Mcafee, Llc
Product McAfee Total Protection - Free Antivirus Trial
Weakness CWE-714
Published September 13, 2019
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L

What the vulnerability does

01Description

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights.

Key dates

02Disclosure timeline

September 13, 2019 CVE published
September 17, 2024 Record updated