SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability
Priority LOW 23CWE-74Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- Required
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.0 · CNA. Fix status from CNA.
Summary
Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.
Why it matters now
EPSS 0.00527 44th percentileScored 2026-11-07
Fix Fixed McAfee Anti-Virus Plus (AVP) (McAfee): 29 Mar 2017McAfee Endpoint Security (ENS) (McAfee): 10.2 DAT V3 DAT 2932.0+4 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| McAfee | McAfee Anti-Virus Plus (AVP) | 170329 to before 29 Mar 2017 | 29 Mar 2017 | Patch available | CNA |
| McAfee | McAfee Endpoint Security (ENS) | 10.2 to before 10.2 DAT V3 DAT 2932.0 | 10.2 DAT V3 DAT 2932.0 | Patch available | CNA |
| McAfee | McAfee Host Intrusion Prevention (Host IPS) | 8.0 to before 8.0 Patch 9 Hotfix 1188590 | 8.0 Patch 9 Hotfix 1188590 | Patch available | CNA |
| McAfee | McAfee Internet Security (MIS) | 170329 to before 29 Mar 2017 | 29 Mar 2017 | Patch available | CNA |
| McAfee | McAfee Total Protection (MTP) | 170329 to before 29 Mar 2017 | 29 Mar 2017 | Patch available | CNA |
| McAfee | McAfee Virus Scan Enterprise (VSE) | 8.8 to before 8.8 Patch 8/9 Hotfix 1187884 | 8.8 Patch 8/9 Hotfix 1187884 | Patch available | CNA |
- McAfee Anti-Virus Plus (AVP) VendorMcAfee Affected 170329 to before 29 Mar 2017 Fixed in 29 Mar 2017 Patch available CNA
- McAfee Endpoint Security (ENS) VendorMcAfee Affected 10.2 to before 10.2 DAT V3 DAT 2932.0 Fixed in 10.2 DAT V3 DAT 2932.0 Patch available CNA
- McAfee Host Intrusion Prevention (Host IPS) VendorMcAfee Affected 8.0 to before 8.0 Patch 9 Hotfix 1188590 Fixed in 8.0 Patch 9 Hotfix 1188590 Patch available CNA
- McAfee Internet Security (MIS) VendorMcAfee Affected 170329 to before 29 Mar 2017 Fixed in 29 Mar 2017 Patch available CNA
- McAfee Total Protection (MTP) VendorMcAfee Affected 170329 to before 29 Mar 2017 Fixed in 29 Mar 2017 Patch available CNA
- McAfee Virus Scan Enterprise (VSE) VendorMcAfee Affected 8.8 to before 8.8 Patch 8/9 Hotfix 1187884 Fixed in 8.8 Patch 8/9 Hotfix 1187884 Patch available CNA
CPE configurations NVD · 17
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mcafee:anti-virus_plus:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:endpoint_security:10.2:*:*:*:*:*:*:* | 10.2 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:host_intrusion_prevention:*:*:*:*:*:*:*:* | up to 8.0 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_1:*:*:*:*:*:* | 8.0 patch_1 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_2:*:*:*:*:*:* | 8.0 patch_2 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_3:*:*:*:*:*:* | 8.0 patch_3 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_4:*:*:*:*:*:* | 8.0 patch_4 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_5:*:*:*:*:*:* | 8.0 patch_5 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_6:*:*:*:*:*:* | 8.0 patch_6 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_7:*:*:*:*:*:* | 8.0 patch_7 | Vulnerable | McAfee |
- cpe:2.3:a:mcafee:anti-virus_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·McAfee
- cpe:2.3:a:mcafee:endpoint_security:10.2:*:*:*:*:*:*:* Versions 10.2 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:host_intrusion_prevention:*:*:*:*:*:*:*:* Versions up to 8.0 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_1:*:*:*:*:*:* Versions 8.0 patch_1 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_2:*:*:*:*:*:* Versions 8.0 patch_2 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_3:*:*:*:*:*:* Versions 8.0 patch_3 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_4:*:*:*:*:*:* Versions 8.0 patch_4 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_5:*:*:*:*:*:* Versions 8.0 patch_5 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_6:*:*:*:*:*:* Versions 8.0 patch_6 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_7:*:*:*:*:*:* Versions 8.0 patch_7 Vulnerable ·McAfee
Show 7 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_8:*:*:*:*:*:* | 8.0 patch_8 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_9:*:*:*:*:*:* | 8.0 patch_9 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:internet_security:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:total_protection:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virus_scan_enterprise:*:*:*:*:*:*:*:* | up to 8.8 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virus_scan_enterprise:8.8:patch_9:*:*:*:*:*:* | 8.8 patch_9 | Vulnerable | McAfee |
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
- cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_8:*:*:*:*:*:* Versions 8.0 patch_8 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_9:*:*:*:*:*:* Versions 8.0 patch_9 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:internet_security:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·McAfee
- cpe:2.3:a:mcafee:total_protection:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virus_scan_enterprise:*:*:*:*:*:*:*:* Versions up to 8.8 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virus_scan_enterprise:8.8:patch_9:*:*:*:*:*:* Versions 8.8 patch_9 Vulnerable ·McAfee
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
Remediation
- Fix · CNA McAfee Anti-Virus Plus (AVP) (McAfee) Fixed in 29 Mar 2017
- Fix · CNA McAfee Endpoint Security (ENS) (McAfee) Fixed in 10.2 DAT V3 DAT 2932.0
- Fix · CNA McAfee Host Intrusion Prevention (Host IPS) (McAfee) Fixed in 8.0 Patch 9 Hotfix 1188590
- Fix · CNA McAfee Internet Security (MIS) (McAfee) Fixed in 29 Mar 2017
- Fix · CNA McAfee Total Protection (MTP) (McAfee) Fixed in 29 Mar 2017
- Fix · CNA McAfee Virus Scan Enterprise (VSE) (McAfee) Fixed in 8.8 Patch 8/9 Hotfix 1187884
Timeline
- 2026-10-02 Threatist record created from CVE-2017-4028
- 2026-10-03 Alias added: GHSA-4v65-vf6x-vh24
References
More McAfee Anti-virus Plus vulnerabilities
- TI-2019-02688 Implicit loading of DLLs CVSS 3.1MEDIUM 6.7
Sources
- CVE-2017-4028 · CVE Program
- CVE-2017-4028 · NVD
- FIRST EPSS
- GHSA-4v65-vf6x-vh24 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences