header-logo
Suggest Exploit
vendor:
Data Loss Prevention Endpoint
by:
Parvez Anwar
7.5
CVSS
HIGH
Arbitrary Write Privilege Escalation
264
CWE
Product Name: Data Loss Prevention Endpoint
Affected Version From: 9.3.200.23
Affected Version To: 9.3.0400
Patch Exists: YES
Related CWE: CVE-2015-1305
CPE: a:mcafee:data_loss_prevention_endpoint:9.3.200.23
Metasploit:
Other Scripts:
Platforms Tested: Windows XP SP3, Windows 2003 Server SP2
2015

McAfee Data Loss Prevention Endpoint Arbitrary Write Privilege Escalation

This exploit allows an attacker to escalate their privileges and write arbitrary data in McAfee Data Loss Prevention Endpoint. The vulnerability exists in the hdlpctrl.sys driver of the software. By exploiting this vulnerability, an attacker can gain elevated privileges and potentially execute arbitrary code on the target system.

Mitigation:

Apply the vendor's patch or upgrade to version 9.3.400 to fix this vulnerability. Ensure that the hdlpctrl.sys driver is updated as well.
Source

Exploit-DB raw data: