← back
CVE-2007-2864

CVE-2007-2864

EPSS 49.6%
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/16677unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/25570https://exchange.xforce.ibmcloud.com/vulnerabilities/34737http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-securitynotice.asphttp://www.kb.cert.org/vuls/id/105105http://www.osvdb.org/35245http://www.securityfocus.com/archive/1/470602/100/0/threadedhttp://www.securityfocus.com/archive/1/470754/100/0/threadedhttp://www.securityfocus.com/bid/24330http://www.securitytracker.com/id?1018199http://www.vupen.com/english/advisories/2007/2072http://www.zerodayinitiative.com/advisories/ZDI-07-035.html