Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-3897

A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prio

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
intel

Description

A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 allows network attackers to perform a malicious file execution via a HTTP backend-response.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee Live Safe

  • 16.0.3affected

McAfee Security Scan Plus

  • 3.11.599.3affected

References