cve/2019/CVE-2019-3633.md

### [CVE-2019-3633](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3633)
![](https://img.shields.io/static/v1?label=Product&message=Data%20Loss%20Prevention%20(DLPe)%20for%20Windows&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=11.x%3C%2011.3.2.8%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Buffer%20overflow&color=brighgreen)

### Description

Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via a carefully constructed message sent to DLPe which bypasses DLPe internal checks and results in DLPe reading unallocated memory.

### POC

#### Reference
- https://kc.mcafee.com/corporate/index?page=content&id=SB10295
- https://kc.mcafee.com/corporate/index?page=content&id=SB10295

#### Github
No PoCs found on GitHub currently.