← back
CVE-2016-4534

CVE-2016-4534

EPSS 2.3%
The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on Windows allows local administrators to bypass intended self-protection rules and unlock the console window by closing registry handles.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/download/136089/mcafeevses-bypass.htmlunverifiedcve_referencewww.exploit-db.com/exploits/39531/unverifiedexploitdbwww.exploit-db.com/exploits/39531unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/download/136089/mcafeevses-bypass.htmlhttp://seclists.org/fulldisclosure/2016/Mar/13https://kc.mcafee.com/corporate/index?page=content&id=SB10158https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/26000/PD26485/en_US/VSE_8_8_HF1123565_release_notes.pdfhttps://lab.mediaservice.net/advisory/2016-01-mcafee.txthttps://www.exploit-db.com/exploits/39531/http://www.securitytracker.com/id/1035754