Vulnerability in Broadcom Anti-virus_for_the_enterprise
CVE-2007-2863
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a long filename in a .CAB file.
EPSS: 0.234 (97.5th percentile) — read the EPSS interpretation.
Affected products
- Broadcom Anti-virus_for_the_enterprise — versions 8
- Broadcom Brightstor_arcserve_backup — versions 9.01, 11.1, 11.5
- Broadcom Brightstor_enterprise_backup — versions 10.5
- Broadcom Common_services — versions 1.0, 1.1, 2.0
- Ca Anti-virus_for_the_enterprise — versions 8
- Ca Brightstor_arcserve_backup — versions 11
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_MISC)