CVE-2007-2864

Published: Jun 6, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.

Affected (33)

Products: Broadcom: Anti Virus For The Enterprise, Brightstor Arcserve Backup, Common Services, Etrust Antivirus, Etrust Antivirus Gateway, Etrust Antivirus Sdk, Etrust Ez Antivirus, Etrust Ez Armor, Integrated Threat Management, Internet Security Suite, Unicenter Network And Systems Management · Ca: Etrust Secure Content Manager, Protection Suites

Broadcom

11 products

Anti Virus For The Enterprise

Brightstor Arcserve Backup

Common Services

Etrust Antivirus

Etrust Antivirus Gateway

Etrust Antivirus Sdk

Etrust Ez Antivirus

Etrust Ez Armor

Integrated Threat Management

Internet Security Suite

Unicenter Network And Systems Management

2 products

Etrust Secure Content Manager

Protection Suites

Configuration A

33 vulnerable

Vulnerable Software	Affected Versions
Broadcom Anti Virus For The Enterprise	Version 8
Broadcom Brightstor Arcserve Backup	Version 10.5
Broadcom Brightstor Arcserve Backup	Version 11.1
Broadcom Brightstor Arcserve Backup	Version 11.5
Broadcom Brightstor Arcserve Backup	Version 11
Broadcom Brightstor Arcserve Backup	Version 9.01
Broadcom Common Services	Version 1.0
Broadcom Common Services	Version 1.1
Broadcom Common Services	Version 2.0
Broadcom Common Services	Version 2.1
Broadcom Common Services	Version 2.2
Broadcom Common Services	Version 3.0
Broadcom Etrust Antivirus	Version 8.0
Broadcom Etrust Antivirus	Version 8.1
Broadcom Etrust Antivirus Gateway	Version 7.1
Broadcom Etrust Antivirus Sdk	All versions
Broadcom Etrust Ez Antivirus	Version 6.1
Broadcom Etrust Ez Antivirus	Version 7.0
Broadcom Etrust Ez Armor	Version 1.0
Broadcom Etrust Ez Armor	Version 2.0
Broadcom Etrust Ez Armor	Version 3.0
Broadcom Etrust Ez Armor	Version 3.1
Broadcom Integrated Threat Management	Version 8.0
Broadcom Internet Security Suite	Version 1.0
Broadcom Internet Security Suite	Version 2.0
Broadcom Internet Security Suite	Version 3.0
Broadcom Unicenter Network And Systems Management	Version 11.1
Broadcom Unicenter Network And Systems Management	Version 11
Broadcom Unicenter Network And Systems Management	Version 3.0
Broadcom Unicenter Network And Systems Management	Version 3.1
Ca Etrust Secure Content Manager	Version 8.0
Ca Protection Suites	Version r2
Ca Protection Suites	Version r3