Lucene search

K
cve[email protected]CVE-2006-5270
HistoryFeb 13, 2007 - 8:28 p.m.

CVE-2006-5270

2007-02-1320:28:00
NVD-CWE-Other
web.nvd.nist.gov
27
cve-2006-5270
integer overflow
microsoft
malware protection engine
remote code execution
pdf
nvd

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.586 Medium

EPSS

Percentile

97.7%

Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file.

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.586 Medium

EPSS

Percentile

97.7%

Related for CVE-2006-5270