CVE-2019-3634: Buffer overflow in DLP Endpoint for Windows
Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via an encrypted message sent to DLPe which when decrypted results in DLPe reading unallocated memory.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-3634?
CVE-2019-3634 is a vulnerability that allows a local user to cause the Windows operating system to "blue screen" by sending an encrypted message to McAfee Data Loss Prevention (DLPe) for Windows, which results in DLPe reading unallocated memory.
What is the severity of CVE-2019-3634?
The severity of CVE-2019-3634 is rated as medium with a severity value of 5.5.
Which software versions are affected by CVE-2019-3634?
CVE-2019-3634 affects McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8.
How can a local user exploit CVE-2019-3634?
A local user can exploit CVE-2019-3634 by sending an encrypted message to McAfee Data Loss Prevention (DLPe) for Windows, which causes the Windows operating system to crash.
Where can I find more information about CVE-2019-3634?
You can find more information about CVE-2019-3634 at the following link: [McAfee Knowledge Center](https://kc.mcafee.com/corporate/index?page=content&id=SB10295)