The version of McAfee Security Scan Plus installed on the remote Windows host is prior to 3.11.474.2. したがって、以下の複数の脆弱性による影響を受けます。

  - A privilege escalation vulnerability exists in McUICnt.exe due to certain DLL files being loaded from the same directory as signed binaries that are scanned using a class object from McComponentHostService.McCompHost. A local attacker can exploit this to gain SYSTEM privileges. (CVE-2016-8008)

  - A local command execution vulnerability exists in the internal API due to a flaw that allows programs to be executed using the RunProgramEx() function in an class object loaded from McComponentHostService.McCompHost. A local attacker can exploit this to execute commands with SYSTEM privileges. (CVE-2016-8026)

検出

McAfee Security Scan Plus < 3.11.474.2 Multiple Vulnerabilities (TS102593 / TS102614)

high Nessus プラグイン ID 100130

バージョン 1.8