CVE-2007-2863 Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a long file...
HighCVSS 10.0
EPSS 23.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a long filename in a .CAB file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom anti-virus for the enterprise | = 8 | No fix listed |
| broadcom brightstor arcserve backup | = 9.01 | No fix listed |
| broadcom brightstor arcserve backup | = 11.1 | No fix listed |
| broadcom brightstor arcserve backup | = 11.5 | No fix listed |
| broadcom brightstor enterprise backup | = 10.5 | No fix listed |
| broadcom common services | = 1.0 | No fix listed |
| broadcom common services | = 1.1 | No fix listed |
| broadcom common services | = 2.0 | No fix listed |
| broadcom common services | = 2.1 | No fix listed |
| broadcom common services | = 2.2 | No fix listed |
| broadcom common services | = 3.0 | No fix listed |
| ca anti-virus for the enterprise | = 8 | No fix listed |
| ca brightstor arcserve backup | = 11 | No fix listed |
References
- 25570 patch third-party-advisory vendor-advisory
- 2790 third-party-advisory
- supportconnectw.ca.com
- VU#739409 third-party-advisory us-government-resource
- 35244 vdb-entry
- 20070605 ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability mailing-list
- 20070607 [CAID 35395, 35396]: CA Anti-Virus Engine CAB File Buffer Overflow Vulnerabilities mailing-list
- 24331 patch vdb-entry
- 1018199 vdb-entry
- ADV-2007-2072 vdb-entry
- www.zerodayinitiative.com
- ca-multiple-antivirus-cab-bo(34741) vdb-entry