CVEvulnerability

CVE-2007-2864

9.3 HIGH Published 2007-06-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-06-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.

Affected configurations

• broadcom anti-virus for the enterprise 8 • broadcom brightstor arcserve backup 9.01 • broadcom brightstor arcserve backup 10.5 • broadcom brightstor arcserve backup 11 • broadcom brightstor arcserve backup 11.1 • broadcom brightstor arcserve backup 11.5 • broadcom common services 1.0 • broadcom common services 1.1 • broadcom common services 2.0 • broadcom common services 2.1 • broadcom common services 2.2 • broadcom common services 3.0 • broadcom etrust antivirus 8.0 • broadcom etrust antivirus 8.1 • broadcom etrust antivirus gateway 7.1 • broadcom etrust antivirus sdk • broadcom etrust ez antivirus 6.1 • broadcom etrust ez antivirus 7.0 • broadcom etrust ez armor 1.0 • broadcom etrust ez armor 2.0 • broadcom etrust ez armor 3.0 • broadcom etrust ez armor 3.1 • broadcom integrated threat management 8.0 • broadcom internet security suite 1.0 • broadcom internet security suite 2.0 • broadcom internet security suite 3.0 • broadcom unicenter network and systems management 3.0 • broadcom unicenter network and systems management 3.1 • broadcom unicenter network and systems management 11 • broadcom unicenter network and systems management 11.1 • ca etrust secure content manager 8.0 • ca protection suites r2 • ca protection suites r3

References