CVE-2016-8005

File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) before 7.6.404h1128596 allows attackers to fail to identify the file name properly via scanning an email with a forged attached filename that uses a null byte within the filename extension.

Score

CVSS 3.0 6.5 Medium

Status

Modified - secure@intel.com

Published

2017-03-14

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Mcafee Email Gateway Meg (Intel)
• Email Gateway (Mcafee)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10161