CVE-2008-1357: McAfee Agent

Medium severity, CVSS 5.4. EPSS: 6.2% chance of exploitation in the next 30 days.

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8.

Affected products

• McAfee Agent: version 4.0 only
• McAfee Cma: version 3.0.6.453 only; version 3.5.5.438 only; version 3.6.438 only; version 3.6.453 only; version 3.6.546 only; version 3.6.574 only
• McAfee Epolicy Orchestrator: version 4.0 only
• McAfee McAfee Framework: version 3.6.569 only

Published 2008-03-17. Last modified 2026-06-16.