CVE-2015-8992
First published: Tue Mar 14 2017(Updated: )
Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| McAfee WebAdvisor | =3.7.2 | |
| McAfee WebAdvisor | =4.0.1 | |
| McAfee WebAdvisor | =4.0.2 | |
| McAfee Cloud AV | ||
| McAfee Security Scan Plus |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2015-8992?
CVE-2015-8992 is classified as a medium severity vulnerability due to its potential for exploitation during installation or uninstallation processes.
How do I fix CVE-2015-8992?
To fix CVE-2015-8992, users should upgrade to Intel Security WebAdvisor version 4.0.2 or later.
What software is affected by CVE-2015-8992?
CVE-2015-8992 affects McAfee Security WebAdvisor versions 3.7.2, 4.0.1, and 4.0.2, as well as related products.
What types of attacks does CVE-2015-8992 enable?
CVE-2015-8992 allows attackers to execute specifically crafted malware during the installation or uninstallation phases.
When was CVE-2015-8992 reported?
CVE-2015-8992 was reported in late 2015, highlighting the vulnerability in specific versions of McAfee software.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/mcafee
- canonical/mcafee webadvisor
- version/mcafee webadvisor/3.7.2
- version/mcafee webadvisor/4.0.1
- version/mcafee webadvisor/4.0.2
- canonical/mcafee cloud av
- canonical/mcafee security scan plus