VulnerabilityModified
CVE-2006-5270
Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file.
HIGH 9.3EPSS 30.3%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 30.3%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 30.28% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/antigen · microsoft/forefront security · microsoft/malware protection engine · microsoft/windows defender · microsoft/windows live onecare
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/24146
- http://www.kb.cert.org/vuls/id/511577US Government Resource
- http://www.osvdb.org/31888
- http://www.securityfocus.com/bid/22479
- http://www.securitytracker.com/id?1017636
- http://www.us-cert.gov/cas/techalerts/TA07-044A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/0579
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-010
- http://secunia.com/advisories/24146
- http://www.kb.cert.org/vuls/id/511577US Government Resource
- http://www.osvdb.org/31888
- http://www.securityfocus.com/bid/22479
- http://www.securitytracker.com/id?1017636
- http://www.us-cert.gov/cas/techalerts/TA07-044A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/0579
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-010
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.