CVE-2007-3825

high · 9.3

Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allow remote attackers to execute arbitrary code by sending certain data to unspecified RPC procedures.

9.3

CVSS

14.0%

EPSS (exploit prob.)

96th

EPSS percentile

2007-07-18

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
broadcom	alert_notification_server	all versions
broadcom	brightstor_arcserve_backup	9.01
broadcom	brightstor_arcserve_backup	11.1
broadcom	brightstor_arcserve_backup	11.5
broadcom	brightstor_enterprise_backup	10.5
ca	anti-virus_for_the_enterprise	8
ca	brightstor_arcserve_backup	11
ca	brightstor_arcserve_client	all versions
ca	protection_suites	r3
ca	threat_manager	8

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-3825