Stack-Based Buffer Overflow in McAfee File Lock by McAfee

CVE-2015-8773

Summary

A stack-based buffer overflow vulnerability exists in the McPvDrv.sys driver (version 4.6.111.0) used by McAfee File Lock 5.x. This flaw exposes the system to potential denial of service attacks, allowing attackers to induce crashes through the exploitation of excessively long vault GUIDs in ioctl calls. Such an attack may lead to significant system instability and service disruption.

References