Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2017-4028

SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability

Description

Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee McAfee Anti-Virus Plus (AVP)

  • 170329 to < 29 Mar 2017affected

McAfee McAfee Endpoint Security (ENS)

  • 10.2 to < 10.2 DAT V3 DAT 2932.0affected

McAfee McAfee Host Intrusion Prevention (Host IPS)

  • 8.0 to < 8.0 Patch 9 Hotfix 1188590affected

McAfee McAfee Internet Security (MIS)

  • 170329 to < 29 Mar 2017affected

McAfee McAfee Total Protection (MTP)

  • 170329 to < 29 Mar 2017affected

McAfee McAfee Virus Scan Enterprise (VSE)

  • 8.8 to < 8.8 Patch 8/9 Hotfix 1187884affected

References