Unscored severity · published Apr 7, 2008
CVE-2007-4620
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products…
–
CVSS
52.3%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.
Exploitation
Is it being used?
Exploit prediction (EPSS)52.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Anti-virus For The Enterprise · Broadcom
7.1; 8; 8.1 · source: NVD
BA
Brightstor Arcserve Backup · Broadcom
11.1; 11.5 · source: NVD
TM
Threat Manager For The Enterprise · CA
r8; r8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4620
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4620
community.ca.com
http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679
secunia.com
http://secunia.com/advisories/29665
securityreason.com
http://securityreason.com/securityalert/3799
www.securityfocus.com
http://www.securityfocus.com/archive/1/490466/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/28605
More from Anti-virus For The Enterprise
–
CVE-2009-3588
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-0042
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1;…
–
CVE-2007-3875
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss…
–
CVE-2007-2863
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary…