Vulnerability in Mcafee Virusscan Enterprise
CVE-2016-4534
The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on Windows allows local administrators to bypass intended self-protection rules and unlock the console window by closing registry handles.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 3.0 (Low). Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L.
EPSS exploit prediction
EPSS: 0.023 (82.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 82nd percentile — 82.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.023 · newest: 0.023 · change: 0.000
Affected products
- Mcafee Virusscan Enterprise — versions 8.8.0
- Microsoft Windows
Weakness classification (CWE)
References
- kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/26000/P… (Vendor Advisory)
- seclists.org/fulldisclosure/2016/Mar/13 (mailing-list, Exploit)
- kc.mcafee.com/corporate/index (Patch, Vendor Advisory)
- lab.mediaservice.net/advisory/2016-01-mcafee.txt (Exploit)
- www.exploit-db.com/exploits/39531/ (Exploit, exploit)
- packetstormsecurity.com/files/download/136089/mcafeevses-bypass.html (Exploit)
- www.securitytracker.com/id/1035754 (vdb-entry)
Frequently asked questions
- What is CVE-2016-4534?
- CVE-2016-4534 is a low-severity vulnerability in Mcafee Virusscan Enterprise, classified under CWE-264. CVSS score: 3.0/10. Published 2016-05-05.
- How severe is CVE-2016-4534?
- Low severity. CVSS v3 base score is 3.0 out of 10.