CVE-2004-2635 An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages that use the control's RegQueryValue() method.
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages that use the control's RegQueryValue() method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee security installer control system | = 4.0.0.81 | No fix listed |
References
- 20040425 McAfee VirusScan installer uses insecure ActiveX controls exploit mailing-list
- 11493 patch third-party-advisory vendor-advisory
- 5713 patch vdb-entry
- 10236 vdb-entry
- 1009956 exploit vdb-entry
- mcafee-virusscan-activex-gain-access(15994) vdb-entry