VULNERABILITY INTELLIGENCE

CVE-2006-5270

CVSS score9.3 NONE
EPSS probability30.28%
CISA KEVNot currently listed
Published2007-02-13
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references