CVE-2007-2522

CWE-119 — Buffer Overflow3 documents3 sources
Severity
10.0CRITICAL
EPSS
46.1%
top 2.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Broadcom Antispyware FOR THE EnterpriseBroadcom Etrust Integrated Threat ManagementBroadcom Etrust Pestpatrol
Timeline
PublishedMay 11
Latest updateMay 1

Description

Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long (1) username or (2) password.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages3 packages

🔴Vulnerability Details

2
GHSA
GHSA-fc84-396x-x24g: Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8↗2022-05-01
▶
CVEList
CVE-2007-2522: Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8↗2007-05-11
▶
CVE-2007-2522 (CRITICAL CVSS 10) | Stack-based buffer overflow in the | cvebase.io