Lucene search

K
zdiAnonymousZDI-07-034
HistoryJun 05, 2007 - 12:00 a.m.

CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability

2007-06-0500:00:00
Anonymous
www.zerodayinitiative.com
14

0.213 Low

EPSS

Percentile

96.5%

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of various Computer Associates products. The specific flaw exists in the parsing of .CAB archives. When a long filename contained in the .CAB is processed by vete.dll an exploitable stack overflow may occur.

0.213 Low

EPSS

Percentile

96.5%