CVE-2015-8577

CVE-2015-8577 describes a buffer overflow protection bypass in McAfee VirusScan Enterprise (VSE) versions prior to 8.8 Patch 6. The vulnerability stems from VSE allocating memory with Read, Write, Execute (RWX) permissions at predictable addresses on 32-bit systems when protecting other applications. This flaw allows attackers to bypass critical security mechanisms like Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR) through unspecified vectors. The vulnerability has a low CVSS score of 2.6, indicating a low severity. It requires local access (AV:L) and high attack complexity (AC:H), with potential for partial confidentiality and integrity impact (C:P/I:P). There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public attention and perceived threat. The EPSS score is also very low, further indicating a low probability of exploitation.