First published: Wed Aug 22 2012(Updated: )
McAfee VirusScan Enterprise before 8.8 allows local users to disable the product by leveraging administrative privileges to execute an unspecified Metasploit Framework module.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
McAfee VirusScan | =8.0i | |
McAfee VirusScan | =8.7i | |
McAfee VirusScan | =8.7.00003 | |
McAfee VirusScan | <=8.7.0 | |
McAfee VirusScan | =8.0i-p11 | |
McAfee VirusScan | =8.7.00004 | |
McAfee VirusScan | =8.6.0 | |
McAfee VirusScan | =8.5i |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-5143 is classified as a high severity vulnerability due to its potential misuse by local users to disable security defenses.
To mitigate CVE-2010-5143, update McAfee VirusScan Enterprise to version 8.8 or later, as all previous versions are vulnerable.
CVE-2010-5143 affects local users with administrative privileges on systems running versions of McAfee VirusScan Enterprise prior to 8.8.
Attackers exploiting CVE-2010-5143 can execute a Metasploit Framework module to disable the antivirus protection.
There are no available workarounds for CVE-2010-5143, so upgrading to a patched version is essential for protection.