DTAM130 - McAfee VirusScan Buffer Overflow Protection Buffer Overflow Settings must be configured to enable Buffer Overflow Protection.


Buffer overflow is an anomaly where a program, while writing data to a buffer, overruns the buffer's boundary and overwrites adjacent memory. This anomaly has been used maliciously, explicitly to craft exploits. Buffer overflow attacks compose greater than 25% of malware attacks. Without buffer overflow protection enabled, systems are more vulnerable to attacks that attempt to overwrite adjacent memory in the stack frame. Buffer overflow protection is only configurable on non-64-bit systems.


Access the local VirusScan console by clicking Start->All Programs->McAfee->VirusScan Console.
In the console window, under Task, click Task->Buffer Overflow Protection, right-click, and select Properties.

Under the Buffer Overflow Protection tab, locate the 'Buffer Overflow settings:' label. Select the 'Enable buffer overflow protection' option.

Click OK to Save.

See Also


Item Details


References: 800-53|SI-3c.1., CAT|II, CCI|CCI-001242, Rule-ID|SV-243404r722551_rule, STIG-ID|DTAM130, STIG-Legacy|SV-56428, STIG-Legacy|V-14631, Vuln-ID|V-243404

Plugin: Windows

Control ID: 711d9f568e5c16426de84cce04fedd32bd78f5ed61d66e42fb569c8fe8abe463