CVEvulnerability
CVE-2007-2864
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.
Affected configurations
• broadcom anti-virus for the enterprise 8
• broadcom brightstor arcserve backup 9.01
• broadcom brightstor arcserve backup 10.5
• broadcom brightstor arcserve backup 11
• broadcom brightstor arcserve backup 11.1
• broadcom brightstor arcserve backup 11.5
• broadcom common services 1.0
• broadcom common services 1.1
• broadcom common services 2.0
• broadcom common services 2.1
• broadcom common services 2.2
• broadcom common services 3.0
• broadcom etrust antivirus 8.0
• broadcom etrust antivirus 8.1
• broadcom etrust antivirus gateway 7.1
• broadcom etrust antivirus sdk
• broadcom etrust ez antivirus 6.1
• broadcom etrust ez antivirus 7.0
• broadcom etrust ez armor 1.0
• broadcom etrust ez armor 2.0
• broadcom etrust ez armor 3.0
• broadcom etrust ez armor 3.1
• broadcom integrated threat management 8.0
• broadcom internet security suite 1.0
• broadcom internet security suite 2.0
• broadcom internet security suite 3.0
• broadcom unicenter network and systems management 3.0
• broadcom unicenter network and systems management 3.1
• broadcom unicenter network and systems management 11
• broadcom unicenter network and systems management 11.1
• ca etrust secure content manager 8.0
• ca protection suites r2
• ca protection suites r3
References
- http://secunia.com/advisories/25570 Patch, Vendor Advisory
- http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-securitynotice.asp supportconnectw.ca.com
- http://www.kb.cert.org/vuls/id/105105 US Government Resource
- http://www.osvdb.org/35245 www.osvdb.org
- http://www.securityfocus.com/archive/1/470602/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/470754/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24330 Patch
- http://www.securitytracker.com/id?1018199 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2072 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-035.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34737 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/25570 Patch, Vendor Advisory
- http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-securitynotice.asp supportconnectw.ca.com
- http://www.kb.cert.org/vuls/id/105105 US Government Resource
- http://www.osvdb.org/35245 www.osvdb.org
- http://www.securityfocus.com/archive/1/470602/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/470754/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24330 Patch
- http://www.securitytracker.com/id?1018199 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2072 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-035.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34737 exchange.xforce.ibmcloud.com