CVE-2014-9920 Security feature bypass in McAfee Application Control (MAC)
Attackers can bypass whitelisting protections by creating malformed Windows binaries, allowing unauthorized code execution on systems using McAfee Application Control.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-9920?
CVE-2014-9920 is a medium-severity vulnerability in Intel McAfee Application Control (MAC), published on 14 Mar 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0.1 before hotfix 9068, 6.1.0 before hotfix 692, 6.1.1 before hotfix 399, 6.1.2 before hotfix 426, and 6.1.3 before hotfix 357 and earlier allows attackers to create a malformed Windows binary that is considered non-executable and is not protected through the whitelisting protection feature via a specific set of circumstances.
Weakness: CWE-284
Which versions are affected by CVE-2014-9920?
It affects 1 product.
Products include Mcafee Application Control.
How do I fix CVE-2014-9920?
No fix has been published for CVE-2014-9920 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-9920 being exploited?
There is no known exploitation of CVE-2014-9920 in the wild and no public exploit code.
Other vulnerabilities in Intel McAfee Application Control (MAC)
- CVE-2016-8009 Privilege escalation in McAfee Application Control (MAC)
- CVE-2016-8010 Security feature bypass in McAfee Application Control (MAC)
- CVE-2016-1715 Memory corruption in n/a
- CVE-2013-7460 Security feature bypass in Application Control (MAC)
- CVE-2013-7461 Security feature bypass in Change Control (MCC)
Sources
Also known as GHSA-2vwx-95mp-76h9.