Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1 ProtectionPilot 1.1.1 and 1.5 and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to execute arbitrary code via a crafted packet.