Integer Overflow in McAfee ePolicy Orchestrator and ProtectionPilot
CVE-2006-5274
Key Information:
- Vendor
Mcafee
- Vendor
- CVE Published:
- 12 July 2007
What is CVE-2006-5274?
An integer overflow vulnerability exists in McAfee's ePolicy Orchestrator and ProtectionPilot. This flaw affects versions 3.5 through 3.6.1 of ePolicy Orchestrator, and versions 1.1.1 and 1.5 of ProtectionPilot, as well as the Common Management Agent (CMA) version 3.5.5.438. Attackers can exploit this vulnerability by sending specially crafted input, resulting in a denial of service condition that crashes the CMA Framework service. Furthermore, there is a risk that attackers could potentially execute arbitrary code in the context of the vulnerable application, enabling them to gain unauthorized access and perform malicious activities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
EPSS Score
12% chance of being exploited in the next 30 days.
Timeline
Vulnerability published
Vulnerability Reserved