CVE-2017-4028
SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability
Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability
Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.
- Record
CVE-2017-4028- CVSS 3.0
- 5.0 Medium
CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N - Updated
- 2026-11-02
EUVDEUVD-2017-13145
Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.
- Record
EUVD-2017-13145- CVSS 3.0
- 5.0 Medium
CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4v65-vf6x-vh24
Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee...
Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.
- Record
GHSA-4v65-vf6x-vh24- CVSS 3.0
- 4.4 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-74
- Updated
- 2026-11-02
NVD
Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.
- Record
CVE-2017-4028- CVSS 3.0
- 5.0 Medium
CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N - CVSS 3.0
- 4.4 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-74
- Updated
- 2026-11-02
Affected products
- mcafee anti-virus plus
- mcafee endpoint security
- mcafee host intrusion prevention
- mcafee internet security
- mcafee anti-virus plus (avp)
- mcafee endpoint security (ens)
- mcafee host intrusion prevention (host ips)
- mcafee internet security (mis)
- mcafee total protection (mtp)
- mcafee virus scan enterprise (vse)
- mcafee total protection
- mcafee virus scan enterprise
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-4028 is a medium vulnerability (CVSS 5.0) in Mcafee Anti-virus Plus, published April 3, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 44th percentile. No source names a fixed version.