CVE-2007-2864 Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large inv...
HighCVSS 9.3
EPSS 49.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom anti-virus for the enterprise | = 8 | No fix listed |
| broadcom brightstor arcserve backup | = 9.01 | No fix listed |
| broadcom brightstor arcserve backup | = 10.5 | No fix listed |
| broadcom brightstor arcserve backup | = 11 | No fix listed |
| broadcom brightstor arcserve backup | = 11.1 | No fix listed |
| broadcom brightstor arcserve backup | = 11.5 | No fix listed |
| broadcom common services | = 1.0 | No fix listed |
| broadcom common services | = 1.1 | No fix listed |
| broadcom common services | = 2.0 | No fix listed |
| broadcom common services | = 2.1 | No fix listed |
| broadcom common services | = 2.2 | No fix listed |
| broadcom common services | = 3.0 | No fix listed |
| broadcom etrust antivirus | = 8.0 | No fix listed |
| broadcom etrust antivirus | = 8.1 | No fix listed |
| broadcom etrust antivirus gateway | = 7.1 | No fix listed |
| broadcom etrust antivirus sdk | All versions | No fix listed |
| broadcom etrust ez antivirus | = 6.1 | No fix listed |
| broadcom etrust ez antivirus | = 7.0 | No fix listed |
| broadcom etrust ez armor | = 1.0 | No fix listed |
| broadcom etrust ez armor | = 2.0 | No fix listed |
| broadcom etrust ez armor | = 3.0 | No fix listed |
| broadcom etrust ez armor | = 3.1 | No fix listed |
| broadcom integrated threat management | = 8.0 | No fix listed |
| broadcom internet security suite | = 1.0 | No fix listed |
| broadcom internet security suite | = 2.0 | No fix listed |
Show 8 more
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom internet security suite | = 3.0 | No fix listed |
| broadcom unicenter network and systems management | = 3.0 | No fix listed |
| broadcom unicenter network and systems management | = 3.1 | No fix listed |
| broadcom unicenter network and systems management | = 11 | No fix listed |
| broadcom unicenter network and systems management | = 11.1 | No fix listed |
| ca etrust secure content manager | = 8.0 | No fix listed |
| ca protection suites | = r2 | No fix listed |
| ca protection suites | = r3 | No fix listed |
References
- 25570 patch third-party-advisory vendor-advisory
- supportconnectw.ca.com
- VU#105105 third-party-advisory us-government-resource
- 35245 vdb-entry
- 20070605 ZDI-07-035: CA Multiple Product AV Engine CAB Header Parsing Stack Overflow Vulnerability mailing-list
- 20070607 [CAID 35395, 35396]: CA Anti-Virus Engine CAB File Buffer Overflow Vulnerabilities mailing-list
- 24330 patch vdb-entry
- 1018199 vdb-entry
- ADV-2007-2072 vdb-entry
- www.zerodayinitiative.com
- ca-multiple-antivirus-cofffiles-bo(34737) vdb-entry