Skip to content
OpenAdvisories
Medium · 6.1 CVE-2020-7261 EUVD-2020-28388GHSA-x222-6c25-wc8w

Buffer overwrite in ENS allowed to bypass AMSI protection

Published Apr 15, 2020 · Updated Sep 16, 2024 · Assigned by trellix

Description

Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to disable Endpoint Security via a carefully crafted user input.

Affected products

VendorProductAffectedFixed
McAfee McAfee Endpoint Security (ENS) 10.x – < 10.7.0 April 2020 Update 10.7.0 April 2020 Update

References