CVE-2007-3302
high · 9.3The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified "scriptable functions."
9.3
CVSS
10.8%
EPSS (exploit prob.)
96th
EPSS percentile
2007-07-26
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| broadcom | etrust_intrusion_detection | 3.0 |
| ca | etrust_intrusion_detection | 3.0 |
| ca | etrust_intrusion_detection | 3.05.81 |
Check a specific version with /api/v1/cve/match.
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=568
- http://secunia.com/advisories/26134
- http://supportconnectw.ca.com/public/etrust/etrust_intrusion/infodocs/eid-callervilnsecnot.asp
- http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149811
- http://www.securityfocus.com/archive/1/474599/100/0/threaded
- http://www.securityfocus.com/bid/25050
- http://www.securitytracker.com/id?1018447
- http://www.vupen.com/english/advisories/2007/2640
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35565
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=568
- http://secunia.com/advisories/26134
- http://supportconnectw.ca.com/public/etrust/etrust_intrusion/infodocs/eid-callervilnsecnot.asp
- http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149811
- http://www.securityfocus.com/archive/1/474599/100/0/threaded
- http://www.securityfocus.com/bid/25050
- http://www.securitytracker.com/id?1018447
- http://www.vupen.com/english/advisories/2007/2640
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35565
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-3302