CVE:CVE-2019-3585
CNNVD:CNNVD-202006-839
McAfee VirusScan Enterprise（VSE）是美国迈克菲（McAfee）公司的一套杀毒软件。该软件提供全方位的安全防护、扫描内存以查找恶意代码和为远程系统优化更新等功能。
McAfee VSE 8.8 Patch 14之前版本中的Microsoft Windows client (McTray.exe)存在权限许可和访问控制问题漏洞。本地攻击者可通过运行McAfee Tray利用该漏洞以较高的权限与On-Access Scan Messages - Threat Alert窗口进行交互。
solution:Upgrade mcafee virusscan_enterprise to a higher version than 8.8,8.8:patch1,8.8:patch10,8.8:patch11,8.8:patch12,8.8:patch13,8.8:patch2,8.8:patch3,8.8:patch4,8.8:patch5,8.8:patch6,8.8:patch7,8.8:patch8,8.8:patch9,and avoid the version 8.8,8.8:patch1,8.8:patch10,8.8:patch11,8.8:patch12,8.8:patch13,8.8:patch2,8.8:patch3,8.8:patch4,8.8:patch5,8.8:patch6,8.8:patch7,8.8:patch8,8.8:patch9