CVE-2007-4620 - Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests

Back Back to CVE browser

HIGH

Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests

Published Apr 7, 2008

9.0

HIGH

CVSS 2.0

EPSS 52.27%

Description

Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (11)

http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx
x_refsource_CONFIRM
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679
third-party-advisoryx_refsource_IDEFENSE
http://secunia.com/advisories/29665
third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/3799
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/490466/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/28605
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1019789
vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id?1019790
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2008/1103/references
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/41639
vdb-entryx_refsource_XF
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103
x_refsource_CONFIRM

Link	Providers	Tags
http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx		x_refsource_CONFIRM
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679		third-party-advisoryx_refsource_IDEFENSE
http://secunia.com/advisories/29665		third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/3799		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/490466/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/28605		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1019789		vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id?1019790		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2008/1103/references		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/41639		vdb-entryx_refsource_XF
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 7, 2008

Updated Aug 7, 2024

Reserved Aug 30, 2007

Link CVE-2007-4620

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-4620

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-4620