Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to disable Endpoint Security via a carefully crafted user input.
| Software | From | Fixed in |
|---|---|---|
| mcafee / endpoint_security | 10.5.0 | 10.5.0.x |
| mcafee / endpoint_security | 10.5.1 | 10.5.1.x |
| mcafee / endpoint_security | 10.5.2 | 10.5.2.x |
| mcafee / endpoint_security | 10.5.3 | 10.5.3.x |
| mcafee / endpoint_security | 10.5.4 | 10.5.4.x |
| mcafee / endpoint_security | 10.5.5 | 10.5.5.x |
| mcafee / endpoint_security | 10.6.0 | 10.6.0.x |