CVE-2017-4028

Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:mcafee:anti-virus_plus:-:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:endpoint_security:10.2:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:*:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_1:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_2:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_3:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_4:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_5:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_6:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_7:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_8:*:*:*:*:*:*
cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_9:*:*:*:*:*:*
cpe:2.3:a:mcafee:internet_security:-:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:total_protection:-:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:virus_scan_enterprise:*:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:virus_scan_enterprise:8.8:patch_9:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:26

Type Values Removed Values Added
CVSS v2 : 2.1
v3 : 4.4
v2 : 2.1
v3 : 5.0
References () http://www.securityfocus.com/bid/97958 - () http://www.securityfocus.com/bid/97958 -
References () https://kc.mcafee.com/corporate/index?page=content&id=SB10193 - () https://kc.mcafee.com/corporate/index?page=content&id=SB10193 -

07 Nov 2023, 02:44

Type Values Removed Values Added
References (CONFIRM) https://kc.mcafee.com/corporate/index?page=content&id=SB10193 - Third Party Advisory () https://kc.mcafee.com/corporate/index?page=content&id=SB10193 -
References (BID) http://www.securityfocus.com/bid/97958 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/97958 -

Information

Published : 2018-04-03 22:29

Updated : 2024-11-21 03:26


NVD link : CVE-2017-4028

Mitre link : CVE-2017-4028

CVE.ORG link : CVE-2017-4028


JSON object : View

Products Affected

mcafee

  • total_protection
  • virus_scan_enterprise
  • host_intrusion_prevention
  • endpoint_security
  • internet_security
  • anti-virus_plus

microsoft

  • windows
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')