NetSight
IP …
critical9.3Public exploit code

CVE-2007-2864

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.

Affected products

VendorProductAffected versions
BroadcomAnti-Virus For The Enterprise
Version 8
BroadcomBrightstor Arcserve Backup
Versions 9.01, 10.5, 11, 11.1, 11.5
BroadcomCommon Services
Versions 1.0, 1.1, 2.0, 2.1, 2.2, 3.0
BroadcomEtrust Antivirus
Versions 8.0, 8.1
BroadcomEtrust Antivirus Gateway
Version 7.1
BroadcomEtrust Antivirus Sdk
All versions
BroadcomEtrust Ez Antivirus
Versions 6.1, 7.0
BroadcomEtrust Ez Armor
Versions 1.0, 2.0, 3.0, 3.1
BroadcomIntegrated Threat Management
Version 8.0
BroadcomInternet Security Suite
Versions 1.0, 2.0, 3.0
BroadcomUnicenter Network And Systems Management
Versions 3.0, 3.1, 11, 11.1
CaEtrust Secure Content Manager
Version 8.0

References