Multiple McAfee Products CVE-2017-4028 Local Code Injection Vulnerability

Bugtraq ID:	97958
Class:	Input Validation Error
CVE:	CVE-2017-4028
Remote:	No
Local:	Yes
Published:	Mar 29 2017 12:00AM
Updated:	May 02 2017 12:08AM
Credit:	The vendor reported this issue.
Vulnerable:	McAfee Virus Scan Enterprise 8.8 Patch 8 McAfee Total Protection 0 McAfee Internet Security 0 McAfee Host Intrusion Prevention Service 8.0 Patch 8 McAfee Host Intrusion Prevention Service 8.0 Patch 7 McAfee Host Intrusion Prevention Service 8.0 McAfee Endpoint Security 10.2 McAfee Anti-Virus Plus 0
Not Vulnerable:	McAfee Virus Scan Enterprise 8.8 Patch 9 McAfee Host Intrusion Prevention Service 8.0 Patch 9

Multiple McAfee Products CVE-2017-4028 Local Code Injection Vulnerability

Multiple McAfee Products are prone to a local code-injection vulnerability.

An attacker can exploit this issue to inject and execute arbitrary code in the context of the affected application.

Multiple McAfee Products CVE-2017-4028 Local Code Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple McAfee Products CVE-2017-4028 Local Code Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple McAfee Products CVE-2017-4028 Local Code Injection Vulnerability

References:

• McAfee Homepage (McAfee)
  
• Security Bulletin: Updates fix a potential vulnerability in Window-based product (McAfee)