CVE-2007-2864

high · 9.3

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.

9.3

CVSS

49.6%

EPSS (exploit prob.)

99th

EPSS percentile

2007-06-06

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
broadcom	anti-virus_for_the_enterprise	8
broadcom	brightstor_arcserve_backup	9.01
broadcom	brightstor_arcserve_backup	10.5
broadcom	brightstor_arcserve_backup	11
broadcom	brightstor_arcserve_backup	11.1
broadcom	brightstor_arcserve_backup	11.5
broadcom	common_services	1.0
broadcom	common_services	1.1
broadcom	common_services	2.0
broadcom	common_services	2.1
broadcom	common_services	2.2
broadcom	common_services	3.0
broadcom	etrust_antivirus	8.0
broadcom	etrust_antivirus	8.1
broadcom	etrust_antivirus_gateway	7.1
broadcom	etrust_antivirus_sdk	all versions
broadcom	etrust_ez_antivirus	6.1
broadcom	etrust_ez_antivirus	7.0
broadcom	etrust_ez_armor	1.0
broadcom	etrust_ez_armor	2.0
broadcom	etrust_ez_armor	3.0
broadcom	etrust_ez_armor	3.1
broadcom	integrated_threat_management	8.0
broadcom	internet_security_suite	1.0
broadcom	internet_security_suite	2.0
broadcom	internet_security_suite	3.0
broadcom	unicenter_network_and_systems_management	3.0
broadcom	unicenter_network_and_systems_management	3.1
broadcom	unicenter_network_and_systems_management	11
broadcom	unicenter_network_and_systems_management	11.1
ca	etrust_secure_content_manager	8.0
ca	protection_suites	r2
ca	protection_suites	r3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-2864