CVE-2016-8032: High severity mcafee anti-malware scan engine vulnerability

Published Mar 31, 2017

Updated

Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local attackers to bypass local security protection via a crafted input file.

Affected Software

21 affected components

McAfee Anti-malware Scan Engine Freebsd=5200

McAfee Anti-malware Scan Engine Linux=5200

McAfee Anti-malware Scan Engine Windows=5200

McAfee Anti-malware Scan Engine Freebsd=5300

McAfee Anti-malware Scan Engine Linux=5300

McAfee Anti-malware Scan Engine Windows=5300

McAfee Anti-malware Scan Engine Freebsd=5400

McAfee Anti-malware Scan Engine Linux=5400

McAfee Anti-malware Scan Engine Windows=5400

McAfee Anti-malware Scan Engine Freebsd=5500

McAfee Anti-malware Scan Engine Linux=5500

McAfee Anti-malware Scan Engine Windows=5500

McAfee Anti-malware Scan Engine Freebsd=5600

McAfee Anti-malware Scan Engine Linux=5600

McAfee Anti-malware Scan Engine Windows=5600

McAfee Anti-malware Scan Engine Freebsd=5700

McAfee Anti-malware Scan Engine Linux=5700

McAfee Anti-malware Scan Engine Windows=5700

McAfee Anti-malware Scan Engine Freebsd=5800

McAfee Anti-malware Scan Engine Linux=5800

McAfee Anti-malware Scan Engine Windows=5800

Remediation

Patch Available

https://kc.mcafee.com/corporate/index?page=content&id=SB10190

Event History

Mar 31, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-8032?

CVE-2016-8032 is considered a high severity vulnerability due to its potential to allow local attackers to bypass security protections.

How do I fix CVE-2016-8032?

To fix CVE-2016-8032, update the Intel Security Anti-Virus Engine to a version above 5800 that addresses the vulnerability.

What systems are affected by CVE-2016-8032?

CVE-2016-8032 affects multiple versions of Intel Security's Anti-Malware Scan Engine, specifically versions 5200 to 5800 across various operating systems.

Who can exploit CVE-2016-8032?

CVE-2016-8032 can be exploited by local attackers who can access the system and provide crafted input files.

Is there a workaround for CVE-2016-8032?

There are no known workarounds for CVE-2016-8032; the best mitigation is to apply the relevant software update.