Cisco AMP for Endpoints Mac Connector Software File Scan Denial of Service Vulnerability

A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine to crash during the scan of local files, resulting in a restart of the AMP Connector and a denial of service (DoS) condition of the Cisco AMP for Endpoints service. The vulnerability is due to insufficient input validation of specific file attributes. An attacker could exploit this vulnerability by providing a crafted file to a user of an affected system. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash, resulting in missed detection and logging of the potentially malicious file. Continued attempts to scan the file could result in a DoS condition of the Cisco AMP for Endpoints service.

N/A

输入验证不恰当

Cisco AMP for Endpoints Mac Connector Software 输入验证错误漏洞

Cisco AMP for Endpoints Mac Connector Software是美国思科（Cisco）公司的一套基于macOS平台的集成了静态和动态恶意软件分析以及威胁情报的终端应用程序。该程序可分析恶意软件的行为和意图、威胁的影响程度以及防御方法等。 Cisco AMP for Endpoints Mac Connector Software 1.12.3.738之前版本中存在输入验证错误漏洞，该漏洞源于程序没有充分验证特定文件数据的输入。攻击者可借助特制文件利用该漏洞导致拒绝服务。

N/A

N/A