CVE-2021-31844: Local Privilege Escalation in McAfee DLP Endpoint for Windows
A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.200 allows a local attacker to execute arbitrary code with elevated privileges through placing carefully constructed Ami Pro (.sam) files onto the local system and triggering a DLP Endpoint scan through accessing a file. This is caused by the destination buffer being of fixed size and incorrect checks being made on the source size.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-31844?
CVE-2021-31844 is a buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to version 11.6.200.
How does CVE-2021-31844 affect McAfee Data Loss Prevention (DLP) Endpoint for Windows?
CVE-2021-31844 allows a local attacker to execute arbitrary code with elevated privileges by placing crafted Ami Pro (.sam) files and triggering a DLP Endpoint scan.
What is the severity of CVE-2021-31844?
CVE-2021-31844 has a severity rating of 7.8 (high).
How can I fix CVE-2021-31844?
To fix CVE-2021-31844, users should upgrade McAfee Data Loss Prevention (DLP) Endpoint for Windows to version 11.6.200 or later.
Where can I find more information about CVE-2021-31844?
More information about CVE-2021-31844 can be found at the following link: [McAfee Security Bulletin SB10368](https://kc.mcafee.com/corporate/index?page=content&id=SB10368)