$ cve CVE-2007-4620 JSON

CVE-2007-4620 EXPLOIT

9.0

HIGH · CVSS 2.0 · EPSS 52.3% (pctl 99)

Patch early

A public exploit exists.

Description

Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.

Scoring

CVSS	9.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:S/C:C/I:C/A:C
EPSS	52.27% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2008-04-07
Last modified	2026-06-16

Affected (4)

Vendor	Product
broadcom	anti-virus for the enterprise
broadcom	brightstor arcserve backup
ca	brightstor arcserve backup
ca	threat manager for the enterprise

Public exploits

Source	Title	Date
exploit-db	Computer Associates - Alert Notification Buffer Overflow (Metasploit)	2010-04-30

References

→ the Explorer · watch your stack · NVD