Secunia

Jonathan Payne has discovered a security issue in the McAfee Security Installer Control (mcinsctl.dll), which can be exploited by malicious people to gain knowledge of sensitive information.

McAfee Security Installer Control is an ActiveX component, which is installed on a user's system when downloading products from the vendor's website. The problem is that values in user accessible registry keys can be read via the "RegQueryValue()" method in the "McAfee.com Registry Class" object. This can be exploited by e.g. tricking a user into visiting a malicious website.

The issue has been confirmed in version 4.0.0.81. Other versions may also be affected.

Solution
Delete the affected ActiveX component (mcinsctl.dll).

Provided and/or discovered by
Jonathan Payne

Deep Links
Links available in Customer Area