Overview
- Description
- Integer underflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted UDP packet, which causes stack corruption.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.6
- Impact score
- 10
- Exploitability score
- 4.9
- Vector string
- AV:N/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mcafee:e-business_server:3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AA04BD6-C46B-4BD9-84A5-D56963D24FDC"
},
{
"criteria": "cpe:2.3:a:mcafee:e-business_server:3.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "737354DF-F5B6-49BA-9428-59DAFFF22942"
},
{
"criteria": "cpe:2.3:a:mcafee:protectionpilot:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D66F27F5-43A8-4E22-B1E4-D5C3261E4BA3"
},
{
"criteria": "cpe:2.3:a:mcafee:protectionpilot:1.1.1:p3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "340AF637-E84E-4326-8390-8055CFF1F76C"
},
{
"criteria": "cpe:2.3:a:mcafee:protectionpilot:1.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFCC653E-637A-41E8-95A6-ADBA7499CB96"
}
],
"operator": "OR"
}
]
}
]