Skip to content
OpenAdvisories
Medium · 5.0 CVE-2017-4028 EUVD-2017-13145GHSA-4v65-vf6x-vh24

SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability

Published Apr 3, 2018 · Updated Sep 17, 2024 · Assigned by trellix

Description

Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.

Affected products

VendorProductAffectedFixed
McAfee McAfee Anti-Virus Plus (AVP) 170329 – < 29 Mar 2017 29 Mar 2017
McAfee McAfee Endpoint Security (ENS) 10.2 – < 10.2 DAT V3 DAT 2932.0 10.2 DAT V3 DAT 2932.0
McAfee McAfee Host Intrusion Prevention (Host IPS) 8.0 – < 8.0 Patch 9 Hotfix 1188590 8.0 Patch 9 Hotfix 1188590
McAfee McAfee Internet Security (MIS) 170329 – < 29 Mar 2017 29 Mar 2017
McAfee McAfee Total Protection (MTP) 170329 – < 29 Mar 2017 29 Mar 2017
McAfee McAfee Virus Scan Enterprise (VSE) 8.8 – < 8.8 Patch 8/9 Hotfix 1187884 8.8 Patch 8/9 Hotfix 1187884

References