CVE-2017-3935

Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the intended content type.

Score

CVSS 3.0 7.5 High

Status

Modified - secure@intel.com

Published

2017-10-31

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Network Data Loss Prevention (Mcafee)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10198