Buffer overflow in Broadcom Anti-Virus For The Enterprise
CVE-2007-4620
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.
Vulnerability class: Buffer Overflow
EPSS: 0.523 (98.9th percentile) — read the EPSS interpretation.
Affected products
- Broadcom Anti-virus_for_the_enterprise — versions 7.1, 8, 8.1
- Broadcom Brightstor_arcserve_backup — versions 11.1, 11.5
- Ca Brightstor_arcserve_backup — versions 11
- Ca Threat_manager_for_the_enterprise — versions r8, r8.1
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
Frequently asked questions
- What is CVE-2007-4620?
- CVE-2007-4620 is a vulnerability in Broadcom Anti-Virus For The Enterprise, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2008-04-07.
- Is CVE-2007-4620 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.