Skip to content
OpenAdvisories
Medium · 4.6 CVE-2020-7279 EUVD-2020-28406GHSA-p29m-rh76-2857

DLL search order hijacking in Host IPS

Published Jun 10, 2020 · Updated Sep 16, 2024 · Assigned by trellix

Description

DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 Update allows attackers with local access to execute arbitrary code via execution from a compromised folder.

Affected products

VendorProductAffectedFixed
McAfee McAfee Host Intrusion Prevention System (Host IPS) for Windows 8.0.x – < 8.0.0 Patch 15 update 8.0.0 Patch 15 update

References