Skip to content

CVE-2017-4028 SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability

MediumCVSS 4.4 EPSS 0.53%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.

Affected products

ProductAffected versionsFixed in
mcafee anti-virus plus All versions No fix listed
mcafee endpoint security = 10.2 No fix listed
mcafee host intrusion prevention <= 8.0 No fix listed
mcafee host intrusion prevention = 8.0-patch_1 No fix listed
mcafee host intrusion prevention = 8.0-patch_2 No fix listed
mcafee host intrusion prevention = 8.0-patch_3 No fix listed
mcafee host intrusion prevention = 8.0-patch_4 No fix listed
mcafee host intrusion prevention = 8.0-patch_5 No fix listed
mcafee host intrusion prevention = 8.0-patch_6 No fix listed
mcafee host intrusion prevention = 8.0-patch_7 No fix listed
mcafee host intrusion prevention = 8.0-patch_8 No fix listed
mcafee host intrusion prevention = 8.0-patch_9 No fix listed
mcafee internet security All versions No fix listed
mcafee total protection All versions No fix listed
mcafee virus scan enterprise <= 8.8 No fix listed
mcafee virus scan enterprise = 8.8-patch_9 No fix listed
McAfee Anti-Virus Plus (AVP) >= 170329, < 29 Mar 2017 29 Mar 2017
McAfee Endpoint Security (ENS) >= 10.2, < 10.2 DAT V3 DAT 2932.0 10.2 DAT V3 DAT 2932.0
McAfee Host Intrusion Prevention (Host IPS) >= 8.0, < 8.0 Patch 9 Hotfix 1188590 8.0 Patch 9 Hotfix 1188590
McAfee Internet Security (MIS) >= 170329, < 29 Mar 2017 29 Mar 2017
McAfee Total Protection (MTP) >= 170329, < 29 Mar 2017 29 Mar 2017
McAfee Virus Scan Enterprise (VSE) >= 8.8, < 8.8 Patch 8/9 Hotfix 1187884 8.8 Patch 8/9 Hotfix 1187884

References