CVE-2007-4620

Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.

CVSS v2.0

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

52.27% chance of exploitation in the next 30 days, 99th percentile

Published

2008-04-07

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/etrust_itm_al…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16410

References

• CVE Record
• NVD entry

Related

• CVE-2007-4611
• CVE-2007-4627
• CVE-2007-4607
• CVE-2007-4628
• CVE-2007-4606
• CVE-2007-4630