$ cve CVE-2007-2864 JSON

CVE-2007-2864 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 49.6% (pctl 99)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	49.65% — more likely to be exploited than 99% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2007-06-06
Last modified	2026-06-16

Affected (13)

Vendor	Product
broadcom	anti-virus for the enterprise
broadcom	brightstor arcserve backup
broadcom	common services
broadcom	etrust antivirus
broadcom	etrust antivirus gateway
broadcom	etrust antivirus sdk
broadcom	etrust ez antivirus
broadcom	etrust ez armor
broadcom	integrated threat management
broadcom	internet security suite
broadcom	unicenter network and systems management
ca	etrust secure content manager
ca	protection suites

Public exploits

Source	Title	Date
exploit-db	CA AntiVirus Engine - CAB Buffer Overflow (Metasploit)	2010-11-11

References

→ the Explorer · watch your stack · NVD