Vulnerability · Published Jun 9, 2021 · Assigned by trellix
CVE-2021-31837Out of bounds write vulnerability in McAfee GetSusp
High 8.8
In plain English
A high-severity out-of-bounds write in McAfee GetSusp from McAfee,LLC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.4%top 68.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Memory corruption vulnerability in the driver file component in McAfee GetSusp prior to 4.0.0 could allow a program being investigated on the local machine to trigger a buffer overflow in GetSusp, leading to the execution of arbitrary code, potentially triggering a BSOD.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| McAfee,LLC | McAfee GetSusp | unspecified – before 4.0.0 |
Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10363 x_refsource_CONFIRM