Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll) as used by Windows Live OneCare Antigen Defender and Forefront Security allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file.