CVE-2021-31837
Assigner: trellix
Published: 2021-06-09T13:45:12
State: PUBLISHED
affected: product: McAfee GetSusp
vendor: McAfee,LLC
versions: lessThan: 4.0.0
status: affected
version: unspecified
versionType: custom
descriptions: value: Memory corruption vulnerability in the driver file component in McAfee GetSusp prior to 4.0.0 could allow a program being investigated on the local machine to trigger a buffer overflow in GetSusp, leading to the execution of arbitrary code, potentially triggering a BSOD.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-787
description: CWE-787: Out of Bounds Write
type: CWE
source: discovery: EXTERNAL
title: Out of bounds write vulnerability in McAfee GetSusp
x_generator: engine: Vulnogram 0.0.9