McAfee ePolicy Orchestrator Framework Services HTTP Code Injection (CVE-2008-1855)

A buffer overflow vulnerability exists in McAfee Framework Services used in McAfee ePolicy Orchestrator and other products...

McAfee ePolicy Orchestrator Framework Services HTTP Buffer Overflow (CVE-2008-1855)

McAfee Corporation is a major vendor of numerous anti-virus, network, and desktop security products which are deployed in consumer as well as enterprise environments. McAfee ePolicy Orchestrator is a central security management system to manage security policy, assess and enforce policy, notify...

CVE-2008-1855

CVE-2008-1855 affects McAfee Common Management Agent (CMA) FrameworkService.exe in CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator (ePO) and ProtectionPilot. The vulnerability allows an unauthenticated, remote attacker to trigger a memory corruption in CMA FrameworkService via ...