CVE-2018-6700: True Key (TK) - DLL Search Order Hijacking vulnerability
Published Sep 24, 2018
·Updated
DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key (TK) before 5.1.165 allows local users to execute arbitrary code via specially crafted malware.
Affected Software
1 affected component
McAfee True Key Windows<5.1.165
Event History
Sep 24, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-6700?
CVE-2018-6700 is rated as a moderate severity vulnerability that allows local users to execute arbitrary code.
2
How do I fix CVE-2018-6700?
To fix CVE-2018-6700, upgrade McAfee True Key to version 5.1.165 or later.
3
Who is affected by CVE-2018-6700?
CVE-2018-6700 affects users of McAfee True Key versions prior to 5.1.165 running on Windows.
4
What type of vulnerability is CVE-2018-6700?
CVE-2018-6700 is a DLL Search Order Hijacking vulnerability.
5
What can an attacker do with CVE-2018-6700?
An attacker exploiting CVE-2018-6700 can execute arbitrary code on the affected system.