McAfee Application Control Automatic File Execution Security Restriction Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
McAfee Application Control
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55558

McAfee Application Control helps enterprises efficiently prevent unauthorized applications from running on servers and terminals.

McAfee Application Control has a security restriction bypass vulnerability that allows automatic file operation. Attackers can exploit this vulnerability to bypass the protection mechanism and execute arbitrary files.

<* Source: Arne Vidstrom (arne.vidstrom@ntsecurity.nu)
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

McAfee
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.mcafee.com/