$ cve CVE-2007-6016 JSON

CVE-2007-6016 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 50.4% (pctl 99)

Patch early

A public exploit exists.

Description

Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary code via a long (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, or (19) _MonthText11 property value when executing the Save method. NOTE: the vendor states "Authenticated user involvement required," but authentication is not needed to attack a client machine that loads this control.

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	50.42% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2008-02-29
Last modified	2026-06-16

Affected (1)

Vendor	Product
symantec	backup exec for windows server

Public exploits

Source	Title	Date
exploit-db	Symantec BackupExec Calendar Control - Remote Buffer Overflow (Metasploit)	2010-05-09
exploit-db	Symantec BackupExec Calendar Control - 'PVCalendar.ocx' Remote Buffer Overflow	2008-02-29

References

→ the Explorer · watch your stack · NVD