CVE-2017-4028

Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.

Published: Apr 4, 2018
Updated: Apr 13, 2023
CVE: CVE-2017-4028
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 4.4
AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

CVSS v2:

Severity: Low
Score: 2.1
AV:L/AC:L/Au:N/C:N/I:P/A:N

CWEs:

CWE-74

Affected Software
References

Software	From	Fixed in
mcafee / endpoint_security	10.2	10.2.x
mcafee / host_intrusion_prevention	-	8.0.x
mcafee / host_intrusion_prevention	8.0-patch_9	8.0-patch_9.x
mcafee / host_intrusion_prevention	8.0-patch_8	8.0-patch_8.x
mcafee / host_intrusion_prevention	8.0-patch_7	8.0-patch_7.x
mcafee / host_intrusion_prevention	8.0-patch_6	8.0-patch_6.x
mcafee / host_intrusion_prevention	8.0-patch_5	8.0-patch_5.x
mcafee / host_intrusion_prevention	8.0-patch_4	8.0-patch_4.x
mcafee / host_intrusion_prevention	8.0-patch_3	8.0-patch_3.x
mcafee / host_intrusion_prevention	8.0-patch_2	8.0-patch_2.x
mcafee / host_intrusion_prevention	8.0-patch_1	8.0-patch_1.x
mcafee / virus_scan_enterprise	-	8.8.x
mcafee / virus_scan_enterprise	8.8-patch_9	8.8-patch_9.x

Vulnerability Database

289,697

CVE-2017-4028