Login Request a demo
Unscored severity · published Feb 6, 2015
CVE-2015-1305
McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted (1)…
–
CVSS
0.9%
EPSS
No
On KEV
Description
McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted (1) 0x00224014 or (2) 0x0022c018 IOCTL call.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Data Loss Prevention Endpoint · Mcafee
through 9.3.300 · source: NVD
Affected product
DL
Data Loss Prevention Endpoint
Mcafee
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1305
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1305
Exploit
http://packetstormsecurity.com/files/130177/McAfee-Data-Loss-Prevention-Endpoint-Privilege-Escalation.html
Exploit
http://www.exploit-db.com/exploits/35953
Exploit
http://www.greyhathacker.net/?p=818
www.osvdb.org
http://www.osvdb.org/show/osvdb/117345
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/100602
Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10097
More from Data Loss Prevention Endpoint
8.8
CVE-2018-6664
Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows…
8.2
CVE-2019-3622
Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows authenticated user to redirect DLPe log files to…
7.8
CVE-2021-23887
Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to write to arbitrary…
7.8
CVE-2018-6689
Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attackers to bypass local…
7.8
CVE-2016-8012
Access control vulnerability in Intel Security Data Loss Prevention Endpoint (DLPe) 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject…