CVE-2016-4534: Low severity mcafee virusscan enterprise vulnerability

Published May 5, 2016

Updated

The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on Windows allows local administrators to bypass intended self-protection rules and unlock the console window by closing registry handles.

Affected Software

2 affected components

McAfee VirusScan Enterprise=8.8.0

Microsoft Windows

Remediation

Patch Available

https://kc.mcafee.com/corporate/index?page=content&id=SB10158

Event History

May 5, 2016

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-4534?

CVE-2016-4534 has a medium severity rating, indicating a moderate level of risk associated with this vulnerability.

How do I fix CVE-2016-4534?

To fix CVE-2016-4534, update to McAfee VirusScan Enterprise version 8.8.0 Hotfix 1123565 or later.

Which versions of McAfee VirusScan Enterprise are affected by CVE-2016-4534?

CVE-2016-4534 affects McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565.

Who can exploit CVE-2016-4534?

Local administrators can exploit CVE-2016-4534 to bypass self-protection rules of the McAfee VirusScan Console.

What is the impact of CVE-2016-4534?

The impact of CVE-2016-4534 allows local administrators to unlock the McAfee VirusScan Console window, potentially compromising system security.