Man-in-the-Middle Attack Vulnerability in McAfee LiveSafe

CVE-2017-3898

Summary

A vulnerability exists in McAfee LiveSafe that allows attackers to perform man-in-the-middle attacks. This issue affects versions prior to 16.0.3 and can be exploited by network attackers to alter the Windows registry values associated with the McAfee update mechanism through manipulated HTTP backend responses, potentially compromising the integrity of the security software.

References