CVE-2007-3334

high · 10

Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitrary code via unknown vectors.

CVSS

10.3%

EPSS (exploit prob.)

95th

EPSS percentile

2007-06-21

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
microsoft	all_windows	all versions
ca	etrust_secure_content_manager	8.0
ingres	database_server	3.0.3

Check a specific version with /api/v1/cve/match.

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=546
http://osvdb.org/37487
http://osvdb.org/37488
http://secunia.com/advisories/25756
http://secunia.com/advisories/25775
http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778
http://www.securityfocus.com/bid/24585
http://www.securitytracker.com/id?1018278
http://www.vupen.com/english/advisories/2007/2288
http://www.vupen.com/english/advisories/2007/2290
https://exchange.xforce.ibmcloud.com/vulnerabilities/34991
https://exchange.xforce.ibmcloud.com/vulnerabilities/34992
https://exchange.xforce.ibmcloud.com/vulnerabilities/35002
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=546
http://osvdb.org/37487
http://osvdb.org/37488
http://secunia.com/advisories/25756
http://secunia.com/advisories/25775
http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778
http://www.securityfocus.com/bid/24585
http://www.securitytracker.com/id?1018278
http://www.vupen.com/english/advisories/2007/2288
http://www.vupen.com/english/advisories/2007/2290

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-3334