Vulnerability Details CVE-2004-2635
An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages that use the control's RegQueryValue() method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.022
EPSS Ranking 83.6%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/ntbugtraq/2004-q2/0026.html
- http://secunia.com/advisories/11493
- http://www.osvdb.org/5713
- http://www.securityfocus.com/bid/10236
- http://www.securitytracker.com/alerts/2004/Apr/1009956.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15994
- http://archives.neohapsis.com/archives/ntbugtraq/2004-q2/0026.html
- http://secunia.com/advisories/11493
- http://www.osvdb.org/5713
- http://www.securityfocus.com/bid/10236
- http://www.securitytracker.com/alerts/2004/Apr/1009956.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15994
Products affected by CVE-2004-2635
-
cpe:2.3:a:mcafee:security_installer_control_system:4.0.0.81