CVE-2015-8577: Buffer Overflow
The Buffer Overflow Protection (BOP) feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8577?
CVE-2015-8577 is considered a high severity vulnerability due to its ability to bypass security mitigations like DEP and ASLR.
How do I fix CVE-2015-8577?
To mitigate CVE-2015-8577, upgrade to McAfee VirusScan Enterprise version 8.8 Patch 6 or later.
What systems are affected by CVE-2015-8577?
CVE-2015-8577 affects McAfee VirusScan Enterprise versions prior to 8.8 Patch 6 on 32-bit platforms.
What is the impact of CVE-2015-8577?
The impact of CVE-2015-8577 allows attackers to potentially execute arbitrary code by bypassing memory protection mechanisms.
Is CVE-2015-8577 specific to certain applications?
CVE-2015-8577 can affect any application being protected by McAfee VirusScan Enterprise that runs on vulnerable system configurations.