CVE:CVE-2017-4028
CNNVD:CNNVD-201704-1408
McAfee Virus Scan Enterprise等都是美国英特尔（Intel）公司（原McAfee公司）的产品。McAfee Virus Scan Enterprise是一套病毒扫描系统。McAfee Total Protection是一套杀毒软件。McAfee Internet Security Suite是一套因特网安全特警套装。Intel Security Host Intrusion Prevention Services（HIPS）是一套入侵防御系统。McAfee Anti-Virus Plus是一套病毒防护软件。
多款McAfee产品中的Windows系统存在本地代码注入漏洞。攻击者可利用该漏洞在受影响的应用程序上下文中注入并执行任意代码。以下产品和版本受到影响：McAfee Virus Scan Enterprise 8.8 Patch 8版本；McAfee Total Protection；McAfee Internet Security；McAfee Host Intrusion Prevention Service 8.0版本，8.0 Patch 8版本，8.0 Patch 7版本；McAfee Endpoint Security 10.2版本；McAfee Anti-Virus Plus。
solution:Upgrade mcafee anti-virus_plus to a higher version than -; Upgrade mcafee endpoint_security to a higher version than 10.2,and avoid the version 10.2; Upgrade mcafee host_intrusion_prevention to a higher version than 8.0,8.0:patch_1,8.0:patch_2,8.0:patch_3,8.0:patch_4,8.0:patch_5,8.0:patch_6,8.0:patch_7,8.0:patch_8,8.0:patch_9,and avoid the version (,8.0],8.0:patch_1,8.0:patch_2,8.0:patch_3,8.0:patch_4,8.0:patch_5,8.0:patch_6,8.0:patch_7,8.0:patch_8,8.0:patch_9; Upgrade mcafee internet_security to a higher version than -; Upgrade mcafee total_protection to a higher version than -; Upgrade mcafee virus_scan_enterprise to a higher version than 8.8,8.8:patch_9,and avoid the version (,8.8],8.8:patch_9