Medium severity5.0NVD Advisory· Published Apr 3, 2018· Updated Jun 17, 2026

CVE-2017-4028

Description

Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.

Affected products

McAfee/McAfee Anti-Virus Plus (AVP)v5
Range: 170329
McAfee/Endpoint Securitycpe-rescue
Range: 10.2
McAfee/Host Intrusion Preventioncpe-rescue
Range: 8.0
McAfee/McAfee Internet Security (MIS)v5
Range: 170329
McAfee/McAfee Total Protectioncpe-rescue
Range: 170329
McAfee/Virusscan Enterprisecpe-rescue
Range: 8.8

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/97958nvd
kc.mcafee.com/corporate/indexnvd

News mentions

No linked articles in our index yet.

cvss	0.325
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000