CVE-2015-8991

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation.

Metrics

CVSS 3.0 7.0/10CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
Intel	McAfee Security Scan+ (MSS+)	before 3.11.266.3

References

https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102462Vendor Advisory
https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102462Vendor Advisory

Timeline

Published: Mar 14, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-89927.0Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momen CVE-2015-89937.0Malicious file execution vulnerability in Intel Security CloudAV (Beta) before 0.5.0.151.3 allows attackers to make the product momentarily CVE-2015-89947.5An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or php-fpm with OpCache enabled. With 5.x aft CVE-2015-89957.8In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.CVE-2015-89967.0In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using t CVE-2015-89977.0In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using CVE-2015-89987.8In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.CVE-2015-89997.8In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an CVE-2015-90007.8In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using th CVE-2015-90015.5In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.CVE-2015-90027.8In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the CVE-2015-90037.8In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.