CVE-2020-7335 : What You Need to Know

A Privilege Escalation vulnerability in McAfee Total Protection (MTP) for Windows allows local users to gain elevated privileges through a specific manipulation method.

Understanding CVE-2020-7335

This CVE involves a vulnerability in McAfee Total Protection (MTP) for Windows that enables privilege escalation for local users.

What is CVE-2020-7335?

This CVE identifies a Privilege Escalation vulnerability in McAfee Total Protection (MTP) for Windows versions prior to 16.0.29. It permits local users to elevate their privileges by manipulating a folder using a junction link.

The Impact of CVE-2020-7335

The vulnerability has a CVSS base score of 7.5, indicating a high severity level. It can lead to elevated privileges for local users, potentially compromising system confidentiality, integrity, and availability.

Technical Details of CVE-2020-7335

This section delves into the technical aspects of the CVE.

Vulnerability Description

The vulnerability in McAfee Total Protection (MTP) for Windows allows local users to exploit a timing issue by creating a junction link in a folder, leading to privilege escalation.

Affected Systems and Versions

Affected Platforms: Windows
Affected Product: McAfee Total Protection (MTP)
Affected Versions: Prior to 16.0.29

Exploitation Mechanism

The vulnerability is exploited by local users through careful manipulation of a folder using a junction link, taking advantage of a timing issue.

Mitigation and Prevention

Protecting systems from CVE-2020-7335 requires immediate actions and long-term security practices.

Immediate Steps to Take

Update McAfee Total Protection (MTP) to version 16.0.29 or higher to mitigate the vulnerability.
Monitor user activities to detect any suspicious behavior related to folder manipulation.

Long-Term Security Practices

Implement the principle of least privilege to restrict user access rights.
Regularly educate users on safe computing practices to prevent exploitation of vulnerabilities.

Patching and Updates

Apply security patches and updates provided by McAfee to address known vulnerabilities and enhance system security.