CVE-2017-3935: Infoleak
Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the intended content type.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3935?
CVE-2017-3935 is considered a critical vulnerability due to its potential to cause data exposure through MIME type sniffing.
How do I fix CVE-2017-3935?
To fix CVE-2017-3935, update to the latest version of McAfee Network Data Loss Prevention that has mitigations in place for MIME type sniffing.
Which versions of McAfee Network Data Loss Prevention are affected by CVE-2017-3935?
CVE-2017-3935 affects McAfee Network Data Loss Prevention versions up to and including 9.3.0.
What are the implications of CVE-2017-3935 for users of Internet Explorer?
Users of older versions of Internet Explorer may experience unintended content being displayed, leading to potential data breaches through MIME type misinterpretation.
Is there a workaround for CVE-2017-3935 until a fix is applied?
A potential workaround for CVE-2017-3935 is to configure the web server to set proper Content-Type headers to mitigate MIME type sniffing.