CVE-2016-3984

Published: Apr 8, 2016Modified: May 6, 2026

5.1

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Exploitability: 0.8 / Impact: 4.2

Source: NVD

Description

The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL) before 2.0.1.140.1, Data Loss Prevention Endpoint (DLPe) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Device Control (MDC) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Endpoint Security (ENS) 10.x before 10.1, Host Intrusion Prevention Service (IPS) 8.0 before 8.0.0.3624, and VirusScan Enterprise (VSE) 8.8 before P7 (8.8.0.1528) on Windows allows local administrators to bypass intended self-protection rules and disable the antivirus engine by modifying registry keys.

Affected (8)

Products: Mcafee: Active Response, Agent, Data Exchange Layer, Data Loss Prevention Endpoint, Endpoint Security, Host Intrusion Prevention, Virusscan Enterprise

7 products

Data Loss Prevention Endpoint

Endpoint Security

Host Intrusion Prevention

Virusscan Enterprise

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Mcafee Active Response	Up to 1.1.0.158
Mcafee Agent	Up to 5.0.2.285
Mcafee Data Exchange Layer	Up to 2.0.0.430.1
Mcafee Data Loss Prevention Endpoint	Up to 9.4.0
Mcafee Data Loss Prevention Endpoint	Up to 9.3.0
Mcafee Endpoint Security	Up to 10.0.1
Mcafee Host Intrusion Prevention	Up to 8.0.0
Mcafee Virusscan Enterprise	Up to 8.8.0