VulnerabilityModified
CVE-2004-2635
An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages that use the control's RegQueryValue() method.
HIGH 7.5EPSS 1.92%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.92%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages that use the control's RegQueryValue() method.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 1.92% probability · 79th percentile
- CISA KEV
- Not listed
- Affected
- mcafee/security installer control system
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/ntbugtraq/2004-q2/0026.htmlExploit
- http://secunia.com/advisories/11493Patch, Vendor Advisory
- http://www.osvdb.org/5713Patch
- http://www.securityfocus.com/bid/10236
- http://www.securitytracker.com/alerts/2004/Apr/1009956.htmlExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15994
- http://archives.neohapsis.com/archives/ntbugtraq/2004-q2/0026.htmlExploit
- http://secunia.com/advisories/11493Patch, Vendor Advisory
- http://www.osvdb.org/5713Patch
- http://www.securityfocus.com/bid/10236
- http://www.securitytracker.com/alerts/2004/Apr/1009956.htmlExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15994
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.