CVE-2016-8005

MEDIUM

Intel Security McAfee Email Gateway <7.6.404h1128596 - Info Disclosure

Title source: llm

Description

File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) before 7.6.404h1128596 allows attackers to fail to identify the file name properly via scanning an email with a forged attached filename that uses a null byte within the filename extension.

References (1)

[Vendor Advisory] https://kc.mcafee.com/corporate/index?page=content&id=SB10161

Scores

CVSS v3 6.5

EPSS 0.0022

EPSS Percentile 44.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Classification

CWE

CWE-264

Status draft

Affected Products (1)

mcafee/email_gateway < 7.6.401

Timeline

Published Mar 14, 2017

Tracked Since Feb 18, 2026