What’s Vulnerable › Vulnerabilities

CVE-2007-3334

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2007-06-21 · updated 2026-06-16

Description

Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitrary code via unknown vectors.

Affected products

• Ca Etrust Secure Content Manager: 8.0
• Ingres Database Server: 3.0.3

References

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=546
• http://osvdb.org/37487
• http://osvdb.org/37488
• http://secunia.com/advisories/25756
• http://secunia.com/advisories/25775
• http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp
• http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778
• http://www.securityfocus.com/bid/24585
• http://www.securitytracker.com/id?1018278
• http://www.vupen.com/english/advisories/2007/2288
• http://www.vupen.com/english/advisories/2007/2290
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34991

Get alerted when CVE-2007-3334 or the next vulnerability affects your stack