CVE-2015-8772

Critical

Published: 29/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

McPvDrv.sys version 4.6.111.0 in McAfee File Lock 5.x and McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a system crash via a large VERIFY_INFORMATION.Length value in an IOCTL_DISK_VERIFY ioctl call.

Risk Assessment

This vulnerability may lead to the disclosure of sensitive data or system crashes, impacting the availability of services within the organization.

Recommendation

It is recommended to update to the latest version of McAfee File Lock and McAfee Total Protection to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial of service (system crash) via a large VERIFY_INFORMATION.Length value in an IOCTL_DISK_VERIFY ioctl call.