CVE-2017-3898

CVE-2017-3898 affects McAfee LiveSafe (MLS) prior to 16.0.3 and is tied to a MitM flaw in the non‑certificate‑based authentication used during HTTP backend responses. An attacker on the network could manipulate the Windows registry value associated with McAfee updates, potentially enabling remote...

CVE-2017-3897

The CVE-2017-3897 entry affects McAfee LiveSafe (older than 16.0.3) and McAfee Security Scan Plus (MSS+) older than 3.11.599.3. It is a code-injection vulnerability in the non‑certificate‑based authentication mechanism that can be triggered by a HTTP backend‑response, allowing a network attacker ...

CVE-2016-4535

CVE-2016-4535 describes an integer signedness error in the McAfee LiveSafe AV engine prior to DAT 8145 (14.0). The flaw allows remote attackers to trigger memory corruption and a denial of service by processing a crafted packed executable, potentially crashing mscan64a.dll on Windows. Public refe...