File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) before 7.6.404h1128596 allows attackers to fail to identify the file name properly via scanning an email with a forged attached filename that uses a null byte within the filename extension.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Email_gateway | Mcafee | * | 7.6.401 (including) |
References
- https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10161
- https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10161