Integer Overflow in McAfee ePolicy Orchestrator and ProtectionPilot

CVE-2006-5274

What is CVE-2006-5274?

An integer overflow vulnerability exists in McAfee's ePolicy Orchestrator and ProtectionPilot. This flaw affects versions 3.5 through 3.6.1 of ePolicy Orchestrator, and versions 1.1.1 and 1.5 of ProtectionPilot, as well as the Common Management Agent (CMA) version 3.5.5.438. Attackers can exploit this vulnerability by sending specially crafted input, resulting in a denial of service condition that crashes the CMA Framework service. Furthermore, there is a risk that attackers could potentially execute arbitrary code in the context of the vulnerable application, enabling them to gain unauthorized access and perform malicious activities.

References