CVE-2004-2635

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages that use the control's RegQueryValue() method.

Affected products

McAfee Security Installer Control System: 4.0.0.81

References

http://archives.neohapsis.com/archives/ntbugtraq/2004-q2/0026.html
http://secunia.com/advisories/11493
http://www.osvdb.org/5713
http://www.securityfocus.com/bid/10236
http://www.securitytracker.com/alerts/2004/Apr/1009956.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/15994
http://archives.neohapsis.com/archives/ntbugtraq/2004-q2/0026.html
http://secunia.com/advisories/11493
http://www.osvdb.org/5713
http://www.securityfocus.com/bid/10236
http://www.securitytracker.com/alerts/2004/Apr/1009956.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/15994

Get alerted when CVE-2004-2635 or the next vulnerability affects your stack