CVE-2006-5274: McAfee Common Management Agent

High severity, CVSS 7.6. EPSS: 5% chance of exploitation in the next 30 days.

Integer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 allows remote attackers to cause a denial of service (CMA Framework service crash) and possibly execute arbitrary code via unspecified vectors.

Affected products

• McAfee Common Management Agent: version 3.6.0.438 only
• McAfee Epolicy Orchestrator: version 3.5.0 only; version 3.6.0 only
• McAfee Protectionpilot: version 1.1.1 only; version 1.5.0 only

Published 2007-07-12. Last modified 2026-06-16.