Full Disclosure

McAfee File Lock Driver – Kernel Stack Based BOF

Posted by Kyriakos Economou on Jan 27

* CVE: CVE-2015-8773
* Vendor: McAfee – Intel Security
* Reported by: Kyriakos Economou
* Date of Release: 26/01/2016
* Date of Fix: N/A
* Affected Products: Multiple
* Affected Version: McPvDrv.sys v4.6.111.0
* Fixed Version: N/A

Description:
McAfee File Lock Driver does not handle correctly GUIDs of the encrypted vaults, which allows to crash the host by
crafting a specific IOCTL with a malformed Vault GUID which is used to identify an object…