VYPR
← All advisories
Medium severity5.0NVD Advisory· Published Apr 3, 2018· Updated Jun 17, 2026

CVE-2017-4028

CVE-2017-4028

Description

Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.

Affected products

22
  • McAfee/Anti Virus Plus2 versions
    cpe:2.3:a:mcafee:anti-virus_plus:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mcafee:anti-virus_plus:-:*:*:*:*:*:*:*
    • (no CPE)range: 170329
  • McAfee/Endpoint Security2 versions
    cpe:2.3:a:mcafee:endpoint_security:10.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mcafee:endpoint_security:10.2:*:*:*:*:*:*:*
    • (no CPE)range: 10.2
  • McAfee/Host Intrusion Prevention11 versions
    cpe:2.3:a:mcafee:host_intrusion_prevention:*:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:mcafee:host_intrusion_prevention:*:*:*:*:*:*:*:*range: <=8.0
    • cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_1:*:*:*:*:*:*
    • cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_2:*:*:*:*:*:*
    • cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_3:*:*:*:*:*:*
    • cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_4:*:*:*:*:*:*
    • cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_5:*:*:*:*:*:*
    • cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_6:*:*:*:*:*:*
    • cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_7:*:*:*:*:*:*
    • cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_8:*:*:*:*:*:*
    • cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_9:*:*:*:*:*:*
    • (no CPE)range: 8.0
  • McAfee/Internet Security2 versions
    cpe:2.3:a:mcafee:internet_security:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mcafee:internet_security:-:*:*:*:*:*:*:*
    • (no CPE)range: 170329
  • McAfee/McAfee Total Protection2 versions
    cpe:2.3:a:mcafee:total_protection:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mcafee:total_protection:-:*:*:*:*:*:*:*
    • (no CPE)range: 170329
  • McAfee/Virusscan Enterprise3 versions
    cpe:2.3:a:mcafee:virus_scan_enterprise:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mcafee:virus_scan_enterprise:*:*:*:*:*:*:*:*range: <=8.8
    • cpe:2.3:a:mcafee:virus_scan_enterprise:8.8:patch_9:*:*:*:*:*:*
    • (no CPE)range: 8.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.