CVE-2017-3897: Code Injection
A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 allows network attackers to perform a malicious file execution via a HTTP backend-response.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3897?
CVE-2017-3897 has been classified as a critical vulnerability due to its potential for code injection and malicious file execution.
How do I fix CVE-2017-3897?
To remediate CVE-2017-3897, upgrade McAfee Live Safe to version 16.0.3 or later and McAfee Security Scan Plus to version 3.11.599.3 or later.
What systems are affected by CVE-2017-3897?
CVE-2017-3897 affects McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus versions prior to 3.11.599.3.
What type of attack can be executed using CVE-2017-3897?
CVE-2017-3897 allows network attackers to perform code injection and execute malicious files through the non-certificate-based authentication mechanism.
Is there a workaround for CVE-2017-3897 if I cannot immediately upgrade?
There are no effective workarounds for CVE-2017-3897; immediate upgrading to the secure versions is recommended.