CVE-2007-2864
Critical
Description
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.
SeverityCritical
CVSS9.3
Exploit probability—
Product
Broadcom Anti-virus For The Enterprise
PublishedJun 6, 2007
First seenJun 6, 2007
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom anti-virus_for_the_enterprise | 8 | — |
| broadcom brightstor_arcserve_backup | 9.01, 10.5, 11, 11.1, 11.5 | — |
| broadcom common_services | 1.0, 1.1, 2.0, 2.1, 2.2, 3.0 | — |
| broadcom etrust_antivirus | 8.0, 8.1 | — |
| broadcom etrust_antivirus_gateway | 7.1 | — |
| broadcom etrust_antivirus_sdk | No range specified | — |
| broadcom etrust_ez_antivirus | 6.1, 7.0 | — |
| broadcom etrust_ez_armor | 1.0, 2.0, 3.0, 3.1 | — |
| broadcom integrated_threat_management | 8.0 | — |
| broadcom internet_security_suite | 1.0, 2.0, 3.0 | — |
| broadcom unicenter_network_and_systems_management | 3.0, 3.1, 11, 11.1 | — |
| ca etrust_secure_content_manager | 8.0 | — |
| ca protection_suites | r2, r3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.