CVE-2016-4535
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
McAfee LiveSafe（MLS）是美国迈克菲（McAfee）公司的一款为所有设备上的数据和身份信息提供全方位实时防护的安全套装。AV engine是McAfee LiveSafe套装的一部分，用于保护设备免受网络攻击。 McAfee LiveSafe 14.0版本中使用的AV引擎DAT 8145之前版本中存在整数符号错误漏洞。远程攻击者可借助特制的封装的可执行文件利用该漏洞造成拒绝服务（内存损坏和崩溃）。
Public Exploits 1
ExploitDB · 1
EDB-39770 [dos]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2016-4535
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Integer signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0, allows remote attackers to cause a denial of service (memory corruption and crash) via a crafted packed executable.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
McAfee LiveSafe AV引擎整数符号错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
McAfee LiveSafe（MLS）是美国迈克菲（McAfee）公司的一款为所有设备上的数据和身份信息提供全方位实时防护的安全套装。AV engine是McAfee LiveSafe套装的一部分，用于保护设备免受网络攻击。 McAfee LiveSafe 14.0版本中使用的AV引擎DAT 8145之前版本中存在整数符号错误漏洞。远程攻击者可借助特制的封装的可执行文件利用该漏洞造成拒绝服务（内存损坏和崩溃）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2016-4535
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-4535
请登录查看更多情报信息。
Exploits & Public PoCs for CVE-2016-4535 (2)
Other References for CVE-2016-4535 (1)
-
https://bugs.chromium.org/p/project-zero/issues/detail?id=817 x_refsource_MISC
Same Patch Batch · n/a · 2016-05-05 · 25 CVEs total
| CVE-2016-3717 | ImageMagick 信息泄露漏洞 | |
| CVE-2016-2176 | OpenSSL 安全漏洞 | |
| CVE-2016-2109 | OpenSSL ASN.1 BIO实现拒绝服务漏洞 | |
| CVE-2016-2108 | OpenSSL ASN.1实现拒绝服务漏洞 | |
| CVE-2016-2107 | OpenSSL AES-NI实现安全漏洞 | |
| CVE-2016-2106 | OpenSSL 整数溢出漏洞 | |
| CVE-2016-2105 | OpenSSL 整数溢出漏洞 | |
| CVE-2000-1254 | OpenSSL 安全漏洞 | |
| CVE-2016-4534 | McAfee VirusScan Enterprise Console 安全漏洞 | |
| CVE-2016-4351 | Trend Micro Email Encryption SQL注入漏洞 | |
| CVE-2016-4008 | GNU Libtasn1 拒绝服务漏洞 | |
| CVE-2016-3718 | ImageMagick 输入验证错误漏洞 | |
| CVE-2016-1368 | Cisco FirePOWER System Software 拒绝服务漏洞 | |
| CVE-2016-3716 | ImageMagick 权限许可和访问控制问题漏洞 | |
| CVE-2016-3715 | ImageMagick 访问控制错误漏洞 | |
| CVE-2016-3714 | ImageMagick 输入验证错误漏洞 | |
| CVE-2016-2168 | Apache Subversion httpd服务器拒绝服务漏洞 | |
| CVE-2016-2167 | Apache Subversion 访问控制错误漏洞 | |
| CVE-2016-2062 | Linux kernel 输入验证错误漏洞 | |
| CVE-2016-2059 | Linux kernel 权限许可和访问控制问题漏洞 |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
V. Comments for CVE-2016-4535
No comments yet