Local Security Bypass in Intel Security Anti-Virus Engine
CVE-2016-8031

7.3HIGH

Key Information:

Vendor
Intel
Status
Anti-virus Engine (ave)
Vendor
CVE Published:
28 March 2017

Summary

A vulnerability in Intel Security Anti-Virus Engine enables local users to circumvent established security measures by crafting specific input files. This flaw could potentially allow unauthorized access, putting systems at risk. Proper updates and security protocols are essential to mitigate the risk posed by this vulnerability.

Affected Version(s)

Anti-Virus Engine (AVE) 5200 through 5800

References

http://www.securitytracker.com/id/1038159
vdb-entryx_refsource_SECTRACK
https://kc.mcafee.com/corporate/index?page=content&id=SB1...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/97142
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.