CVE-2016-8005

MEDIUM

Intel Security McAfee Email Gateway <7.6.404h1128596 - Info Disclosure

Title source: llm
STIX 2.1

Description

File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) before 7.6.404h1128596 allows attackers to fail to identify the file name properly via scanning an email with a forged attached filename that uses a null byte within the filename extension.

References (1)

Core 1
Core References

Scores

CVSS v3 6.5
EPSS 0.0022
EPSS Percentile 44.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-264
Status published
Products (2)
Intel/McAfee Email Gateway (MEG) before 7.6.404h1128596
mcafee/email_gateway < 7.6.401
Published Mar 14, 2017
Tracked Since Feb 18, 2026