CVE-2017-4028

Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.
References
Link Resource
https://kc.mcafee.com/corporate/index?page=content&id=SB10193 Third Party Advisory
http://www.securityfocus.com/bid/97958 Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:mcafee:endpoint_security:10.2:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:virus_scan_enterprise:*:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:virus_scan_enterprise:8.8:patch_9:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_6:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_5:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_4:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_3:*:*:*:*:*:*
cpe:2.3:a:mcafee:anti-virus_plus:-:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_9:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_7:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_2:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:*:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_8:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_1:*:*:*:*:*:*
cpe:2.3:a:mcafee:internet_security:-:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:total_protection:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Information

Published : 2018-04-03 15:29

Updated : 2019-10-09 16:27


NVD link : CVE-2017-4028

Mitre link : CVE-2017-4028


JSON object : View

CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Advertisement

dedicated server usa

Products Affected

mcafee

  • endpoint_security
  • virus_scan_enterprise
  • host_intrusion_prevention
  • anti-virus_plus
  • total_protection
  • internet_security

microsoft

  • windows