CVE-2007-3302

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-26 · updated 2026-06-16

Description

The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified "scriptable functions."

Affected products

Broadcom Etrust Intrusion Detection: 3.0
Ca Etrust Intrusion Detection: 3.0-sp1, 3.05.81

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=568
http://secunia.com/advisories/26134
http://supportconnectw.ca.com/public/etrust/etrust_intrusion/infodocs/eid-callervilnsecnot.asp
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149811
http://www.securityfocus.com/archive/1/474599/100/0/threaded
http://www.securityfocus.com/bid/25050
http://www.securitytracker.com/id?1018447
http://www.vupen.com/english/advisories/2007/2640
https://exchange.xforce.ibmcloud.com/vulnerabilities/35565
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=568
http://secunia.com/advisories/26134
http://supportconnectw.ca.com/public/etrust/etrust_intrusion/infodocs/eid-callervilnsecnot.asp

Get alerted when CVE-2007-3302 or the next vulnerability affects your stack