Integer underflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted UDP packet, which causes stack corruption.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| E-business_server | Mcafee | 3.5 (including) | 3.5 (including) |
| E-business_server | Mcafee | 3.6.1 (including) | 3.6.1 (including) |
| Protectionpilot | Mcafee | 1.1.1 (including) | 1.1.1 (including) |
| Protectionpilot | Mcafee | 1.1.1-p3 (including) | 1.1.1-p3 (including) |
| Protectionpilot | Mcafee | 1.5.0 (including) | 1.5.0 (including) |