CVE-2017-4028: SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability
Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-4028?
The severity of CVE-2017-4028 is medium with a CVSS score of 4.4.
Which products are affected by CVE-2017-4028?
The affected products include McAfee Anti-virus Plus, McAfee Endpoint Security 10.2, McAfee Host Intrusion Prevention 8.0 (up to patch 9), McAfee Internet Security, McAfee Total Protection, and McAfee Virus Scan Enterprise 8.8 (up to patch 9).
How can an administrator exploit CVE-2017-4028?
An administrator can exploit CVE-2017-4028 by injecting arbitrary code into a debugged McAfee process through manipulation of registry parameters.
Are Microsoft Windows products vulnerable to CVE-2017-4028?
No, Microsoft Windows products are not vulnerable to CVE-2017-4028.
Where can I find more information about CVE-2017-4028?
You can find more information about CVE-2017-4028 at the following links: [SecurityFocus](http://www.securityfocus.com/bid/97958), [McAfee Knowledge Center](https://kc.mcafee.com/corporate/index?page=content&id=SB10193).