CVE-2007-2864
No fix known EPSS 50%
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.
Products: broadcom anti-virus_for_the_enterprise, broadcom brightstor_arcserve_backup, broadcom common_services, broadcom etrust_antivirus, broadcom etrust_antivirus_gateway, broadcom etrust_antivirus_sdk, broadcom etrust_ez_antivirus, broadcom etrust_ez_armor, broadcom integrated_threat_management, broadcom internet_security_suite, broadcom unicenter_network_and_systems_management, ca etrust_secure_content_manager, ca protection_suites