Back to CVE Browser

CVE-2007-2522

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0350%

EPSS Percentile1.61th

PublishedMay 11, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long (1) username or (2) password.

Affected Platforms (CPE)

📦

Broadcom

Antispyware For The Enterprise

= 8.0

📦

Broadcom

Etrust Integrated Threat Management

= 8.0

📦

Broadcom

Etrust Pestpatrol

= 8.0

References & Advisories

🔗 http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063275.html

🔗 http://secunia.com/advisories/25202

🔗 http://supportconnectw.ca.com/public/antivirus/infodocs/caav-secnotice050807.asp

🔗 http://www.kb.cert.org/vuls/id/680616

🔗 http://www.osvdb.org/34585

🔗 http://www.securityfocus.com/archive/1/468304/100/0/threaded

🔗 http://www.securityfocus.com/bid/23906

🔗 http://www.securitytracker.com/id?1018043

Related Vulnerabilities

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...

CVE-2026-121886.3

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules...