CVE-2019-3587 - DLL Search Order Hijacking vulnerability

Back Back to CVE browser

HIGH

DLL Search Order Hijacking vulnerability

Published Jan 23, 2019

7.2

HIGH

CVSS 3.0

EPSS 1.37%

Description

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised folder.

Affected products

Vendor McAfee Product Total Protection (MTP) Default
n/a
- Version
  All
  Status
  affected
  Constraints
  <16.0.R18

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

McAfee

Total Protection (MTP)

n/a

Version	Status	Constraints
All	affected	<16.0.R18

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-426

References (1)

http://service.mcafee.com/FAQDocument.aspx?&id=TS102887
x_refsource_MISC

Link	Providers	Tags
http://service.mcafee.com/FAQDocument.aspx?&id=TS102887		x_refsource_MISC

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trellix

Published Jan 23, 2019

Updated Aug 4, 2024

Reserved Jan 3, 2019

Link CVE-2019-3587

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-3587

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-3587