PT-2017-16166 · Microsoft+1 · Windows+1

Publicado 2017-09-01 · Atualizado 2019-10-03 · CVE-2017-3898

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions McAfee LiveSafe versions prior to 16.0.3

Description A man-in-the-middle attack issue exists in the non-certificate-based authentication mechanism, allowing network attackers to modify the Windows registry value associated with the McAfee update via the HTTP backend-response.

Recommendations For versions prior to 16.0.3, update to version 16.0.3 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-3898

Produtos afetados

Mcafee Livesafe

Windows

Referências · 4

• 🔥 https://exploit-db.com/exploits/44062 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-3898 · Nota de Segurança
• http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS102723 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-3898 · Aviso do Fabricante