CVE-2019-3613: DLL search order hijacking in MA
Published Jun 10, 2020
·Updated
DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder.
Affected Software
3 affected components
McAfee Agent>=5.0.0<5.0.6
McAfee Agent>=5.5.0<5.5.4
McAfee Agent>=5.6.0<5.6.4
Event History
Jun 10, 2020
CVE Published
via MITRE·11:12 AM
Data Sourced
via MITRE·11:12 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2019-3613?
CVE-2019-3613 is a DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4.
2
How does CVE-2019-3613 allow attackers to execute arbitrary code?
CVE-2019-3613 allows attackers with local access to execute arbitrary code from a compromised folder.
3
Which versions of McAfee Agent (MA) are affected by CVE-2019-3613?
McAfee Agent (MA) versions prior to 5.6.4 are affected by CVE-2019-3613.
4
What is the severity of CVE-2019-3613?
CVE-2019-3613 has a severity rating of 7.3 (High).
5
How can I fix CVE-2019-3613?
To fix CVE-2019-3613, upgrade McAfee Agent (MA) to version 5.6.4 or a later version.