VULNERABILITY INTELLIGENCE

CVE-2007-2864

CVSS score9.3 HIGH
EPSS probability49.93%
CISA KEVNot currently listed
Published2007-06-06
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.

Primary references