CVE-2016-8020: Code Injection
Published Mar 14, 2017
·Updated
Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to execute arbitrary code via a crafted HTTP request parameter.
Affected Software
1 affected component
McAfee Virusscan Enterprise Linux<=2.0.3
Event History
Mar 14, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-8020?
CVE-2016-8020 is rated as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2016-8020?
To fix CVE-2016-8020, upgrade Intel Security VirusScan Enterprise Linux to a version higher than 2.0.3.
3
Who is affected by CVE-2016-8020?
CVE-2016-8020 affects users of Intel Security VirusScan Enterprise Linux version 2.0.3 and earlier.
4
What type of vulnerability is CVE-2016-8020?
CVE-2016-8020 is an improper control of generation of code vulnerability that could allow arbitrary code execution.
5
Can CVE-2016-8020 be exploited remotely?
Yes, CVE-2016-8020 can be exploited remotely by authenticated users through crafted HTTP requests.