CVEvulnerability

CVE-2017-4028

4.4 MEDIUM Published 2018-04-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-04-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.0 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N
CVSS 3.0 ([email protected])
4.4 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-74

Description

Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.

Affected configurations

• mcafee anti-virus plus • mcafee endpoint security 10.2 • mcafee host intrusion prevention (<= 8.0) • mcafee host intrusion prevention 8.0 • mcafee internet security • mcafee total protection • mcafee virus scan enterprise (<= 8.8) • mcafee virus scan enterprise 8.8

Related

Weakness · CWE (1)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References