Vulnerability in Broadcom Anti-Virus For The Enterprise
CVE-2007-2864
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.
EPSS: 0.496 (98.8th percentile) — read the EPSS interpretation.
Affected products
- Broadcom Anti-virus_for_the_enterprise — versions 8
- Broadcom Brightstor_arcserve_backup — versions 9.01, 10.5, 11
- Broadcom Common_services — versions 1.0, 1.1, 2.0
- Broadcom Etrust_antivirus — versions 8.0, 8.1
- Broadcom Etrust_antivirus_gateway — versions 7.1
- Broadcom Etrust_antivirus_sdk
- Broadcom Etrust_ez_antivirus — versions 6.1, 7.0
- Broadcom Etrust_ez_armor — versions 1.0, 2.0, 3.0
- Broadcom Integrated_threat_management — versions 8.0
- Broadcom Internet_security_suite — versions 1.0, 2.0, 3.0
Public proof-of-concept exploits
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
Frequently asked questions
- What is CVE-2007-2864?
- CVE-2007-2864 is a vulnerability in Broadcom Anti-Virus For The Enterprise. Published 2007-06-06.
- Is CVE-2007-2864 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.