A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of service. This attack exploits the way symlinks are created and how the product works with them.
References
| Link | Resource |
|---|---|
| https://service.mcafee.com/?articleId=TS103271&page=shell&shell=article-view | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
16 Nov 2023, 03:13
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-367 | |
| References | () https://service.mcafee.com/?articleId=TS103271&page=shell&shell=article-view - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 3.3
v3 : 7.0 |
07 Nov 2023, 03:41
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| References | () https://service.mcafee.com/?articleId=TS103271&page=shell&shell=article-view - |
21 Mar 2022, 16:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://service.mcafee.com/?articleId=TS103271&page=shell&shell=article-view - Vendor Advisory | |
| First Time |
Microsoft windows
Microsoft Mcafee Mcafee total Protection |
|
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 3.3
v3 : 6.3 |
10 Mar 2022, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-03-10 23:15
Updated : 2023-12-10 14:22
NVD link : CVE-2022-0280
Mitre link : CVE-2022-0280
CVE.ORG link : CVE-2022-0280
JSON object : View
Products Affected
mcafee
- total_protection
microsoft
- windows
CWE
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition