CVE-2007-4620

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 52.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-04-07 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.

Affected products

Broadcom Anti-Virus For The Enterprise: 7.1, 8, 8.1
Broadcom Brightstor Arcserve Backup: 11.1, 11.5
Ca Brightstor Arcserve Backup: 11
Ca Threat Manager For The Enterprise: r8, r8.1

References

http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679
http://secunia.com/advisories/29665
http://securityreason.com/securityalert/3799
http://www.securityfocus.com/archive/1/490466/100/0/threaded
http://www.securityfocus.com/bid/28605
http://www.securitytracker.com/id?1019789
http://www.securitytracker.com/id?1019790
http://www.vupen.com/english/advisories/2008/1103/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41639
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103
http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx

Get alerted when CVE-2007-4620 or the next vulnerability affects your stack