Privilege Escalation Vulnerability in McAfee Data Loss Prevention Endpoint

CVE-2015-1305

Summary

A vulnerability exists in McAfee Data Loss Prevention Endpoint versions prior to 9.3.400 that allows local users to exploit arbitrary memory writes. By crafting specific IOCTL calls (0x00224014 or 0x0022c018), a malicious user can gain elevated privileges on the system. This flaw poses a significant risk by enabling unauthorized control over affected systems, potentially leading to data loss or compromise.

References