PT-2017-16166 · Microsoft+1 · Windows+1

Published 2017-09-01 · Updated 2019-10-03 · CVE-2017-3898

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions McAfee LiveSafe versions prior to 16.0.3

Description A man-in-the-middle attack issue exists in the non-certificate-based authentication mechanism, allowing network attackers to modify the Windows registry value associated with the McAfee update via the HTTP backend-response.

Recommendations For versions prior to 16.0.3, update to version 16.0.3 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-3898

Affected Products

Mcafee Livesafe

Windows

References · 4

• 🔥 https://exploit-db.com/exploits/44062 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-3898 · Security Note
• http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS102723 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-3898 · Vendor Advisory