Unscored severity · published Jul 26, 2007
CVE-2007-3302
The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote…
–
CVSS
10.8%
EPSS
No
On KEV
Description
The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified "scriptable functions."
Exploitation
Is it being used?
Exploit prediction (EPSS)10.8% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EI
Etrust Intrusion Detection · Broadcom
3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3302
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3302
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=568
Patch
http://secunia.com/advisories/26134
Patch
http://supportconnectw.ca.com/public/etrust/etrust_intrusion/infodocs/eid-callervilnsecnot.asp
www.ca.com
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149811
www.securityfocus.com
http://www.securityfocus.com/archive/1/474599/100/0/threaded
Patch
http://www.securityfocus.com/bid/25050
More from Etrust Intrusion Detection
–
CVE-2009-3588
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-0042
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1;…
–
CVE-2007-3875
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss…
–
CVE-2007-1005
Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to…