CVE-2007-3302 The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary D...
HighCVSS 9.3
EPSS 10.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified "scriptable functions."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom etrust intrusion detection | = 3.0 | No fix listed |
| ca etrust intrusion detection | = 3.0-sp1 | No fix listed |
| ca etrust intrusion detection | = 3.05.81 | No fix listed |
References
- 20070724 Computer Associates eTrust Intrusion Detection CallCode ActiveX Control Code Execution Vulnerability patch third-party-advisory
- 26134 patch third-party-advisory vendor-advisory
- supportconnectw.ca.com patch
- www.ca.com
- 20070725 [CAID 35524]: CA eTrust Intrusion Detection caller.dll Vulnerability mailing-list
- 25050 patch vdb-entry
- 1018447 vdb-entry
- ADV-2007-2640 vdb-entry
- ca-etrust-caller-code-execution(35565) vdb-entry