CVE-2007-2864: broadcom anti-virus_for_the_enterprise

EPSS trend

Probability

49.93%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

+0.28 pp

From 49.65% on 20-09-2026

20-09-202620-10-2026

EPSS score

49.93%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

exploit-databaselocalwindowsVerified
CA AntiVirus Engine - CAB Buffer Overflow (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
CA Antivirus Engine CAB Buffer Overflow
exploit/windows/fileformat/ca_cab
Maturity: weaponized

References

11 links

www.securityfocus.com/bid/24330VDB EntryX Refsource BIDPatch
www.securityfocus.com/archive/1/470602/100/0/threadedMailing ListX Refsource BUGTRAQ
supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-securitynotice.aspX Refsource CONFIRM
www.kb.cert.org/vuls/id/105105Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.vupen.com/english/advisories/2007/2072VDB EntryX Refsource VUPEN
www.zerodayinitiative.com/advisories/ZDI-07-035.htmlX Refsource MISC
www.securityfocus.com/archive/1/470754/100/0/threadedMailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/34737VDB EntryX Refsource XF
www.securitytracker.com/id?1018199VDB EntryX Refsource SECTRACK
www.osvdb.org/35245VDB EntryX Refsource OSVDB

Show all 11 references

secunia.com/advisories/25570Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory

Related vulnerabilities

CVE-2007-2139broadcombrightstor_arcserve_backup+478.00%19y ago25-04-2007 20:00Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.CVE-2007-2863broadcomanti-virus_for_the_enterprise+523.41%19y ago06-06-2007 21:00Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a long filename in a .CAB file.CVE-2007-1785broadcombrightstor_arcserve_backup+115.35%19y ago31-03-2007 01:00The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf) RPC request.CVE-2007-1447broadcombrightstor_arcserve_backup14.57%19y ago16-03-2007 23:00The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC procedure arguments, which result in memory corruption, a different vulnerability than CVE-2006-6076.CVE-2007-1448broadcombrightstor_arcserve_backup0.94%19y ago16-03-2007 23:00The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service (disabled interface) by calling an unspecified RPC function.CVE-2007-0169broadcombrightstor_arcserve_backup+270.69%19y ago11-01-2007 22:00Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums (1) 0x2F and (2) 0x75 in the (a) Message Engine RPC service, or opnum (3) 0xCF in the Tape Engine service.

All vulnerabilities inanti-virus_for_the_enterprise brightstor_arcserve_backup common_services etrust_antivirus etrust_antivirus_gateway

CVE-2007-2864: broadcom anti-virus_for_the_enterprise

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References