CVE-2007-2523: broadcom integrated_threat_management
Vulnerability summary
CVE-2007-2523 is a high (CVSS 7.2) vulnerability in broadcom integrated_threat_management. EPSS estimates a 1.38% chance of exploitation in the next 30 days, higher than 71.6% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 11-05-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before 8.0.448.0.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.38%
Chance of exploitation in the next 30 days
Percentile
72%
Versus all other CVEs
30-day change
0.00 pp
From 1.38% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundCA (Multiple Products) - Console Server / 'InoCore.dll' Remote Code Execution
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Broadcom1 product
Ca1 product
2 vendors · 2 products
References
11 links- blog.48bits.com?p=103X Refsource MISC
- labs.idefense.com/intelligence/vulnerabilities/display.php?id=530Third Party AdvisoryX Refsource IDEFENSEVendor Advisory