CVE-2007-2864

CVE-2007-2864 describes a stack-based buffer overflow in the Computer Associates (CA) Anti-Virus engine when processing CAB archives. The vulnerability exists in the CAB file handling prior to content update 30.6, allowing a remote attacker to execute arbitrary code by delivering a specially craf...

CVE-2006-3223

The CVE-2006-3223 issue affects CA ITM, eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) version 8.0. It is a format string vulnerability in the scan job description field that can crash the process and potentially execute arbitrary code. The vulnerability arises from improper handling of form...

CVE-2007-2523

CA Anti-Virus for the Enterprise r8 and CA Threat Manager r8 contain a local stack-based buffer overflow in InoCore.dll triggered by modifying a NULL-security-descriptor Task Service file mapping (InoTask.exe) via a crafted path. This allows a local attacker to gain SYSTEM-level privileges. The i...