CVEvulnerability
CVE-2007-2863
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a long filename in a .CAB file.
Affected configurations
• broadcom anti-virus for the enterprise 8
• broadcom brightstor arcserve backup 9.01
• broadcom brightstor arcserve backup 11.1
• broadcom brightstor arcserve backup 11.5
• broadcom brightstor enterprise backup 10.5
• broadcom common services 1.0
• broadcom common services 1.1
• broadcom common services 2.0
• broadcom common services 2.1
• broadcom common services 2.2
• broadcom common services 3.0
• ca anti-virus for the enterprise 8
• ca brightstor arcserve backup 11
References
- http://secunia.com/advisories/25570 Patch, Vendor Advisory
- http://securityreason.com/securityalert/2790 securityreason.com
- http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-securitynotice.asp supportconnectw.ca.com
- http://www.kb.cert.org/vuls/id/739409 US Government Resource
- http://www.osvdb.org/35244 www.osvdb.org
- http://www.securityfocus.com/archive/1/470601/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/470754/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24331 Patch
- http://www.securitytracker.com/id?1018199 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2072 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-034.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34741 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/25570 Patch, Vendor Advisory
- http://securityreason.com/securityalert/2790 securityreason.com
- http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-securitynotice.asp supportconnectw.ca.com
- http://www.kb.cert.org/vuls/id/739409 US Government Resource
- http://www.osvdb.org/35244 www.osvdb.org
- http://www.securityfocus.com/archive/1/470601/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/470754/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24331 Patch
- http://www.securitytracker.com/id?1018199 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2072 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-034.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34741 exchange.xforce.ibmcloud.com