CVE-2007-2863

2007-06-0621:30:00

[email protected]

web.nvd.nist.gov

cve-2007-2863

stack-based buffer overflow

anti-virus engine

arbitrary code execution

.cab file

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.213 Low

EPSS

Percentile

96.5%

JSON

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a long filename in a .CAB file.

Affected configurations

NVD

Node

broadcomanti-virus_for_the_enterpriseMatch8

broadcombrightstor_arcserve_backupMatch9.01

broadcombrightstor_arcserve_backupMatch11.1

broadcombrightstor_arcserve_backupMatch11.5

broadcombrightstor_enterprise_backupMatch10.5

broadcomcommon_servicesMatch1.0

broadcomcommon_servicesMatch1.1

broadcomcommon_servicesMatch2.0

broadcomcommon_servicesMatch2.1

broadcomcommon_servicesMatch2.2

broadcomcommon_servicesMatch3.0

caanti-virus_for_the_enterpriseMatch8enterprise

cabrightstor_arcserve_backupMatch11windows

CPENameOperatorVersion
broadcom:anti-virus_for_the_enterprisebroadcom anti-virus for the enterpriseeq8
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq9.01
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq11.1
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq11.5
broadcom:brightstor_enterprise_backupbroadcom brightstor enterprise backupeq10.5
broadcom:common_servicesbroadcom common serviceseq1.0
broadcom:common_servicesbroadcom common serviceseq1.1
broadcom:common_servicesbroadcom common serviceseq2.0
broadcom:common_servicesbroadcom common serviceseq2.1
broadcom:common_servicesbroadcom common serviceseq2.2

CPE	Name	Operator	Version
broadcom:anti-virus_for_the_enterprise	broadcom anti-virus for the enterprise	eq	8
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	9.01
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	11.1
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	11.5
broadcom:brightstor_enterprise_backup	broadcom brightstor enterprise backup	eq	10.5
broadcom:common_services	broadcom common services	eq	1.0
broadcom:common_services	broadcom common services	eq	1.1
broadcom:common_services	broadcom common services	eq	2.0
broadcom:common_services	broadcom common services	eq	2.1
broadcom:common_services	broadcom common services	eq	2.2