漏洞描述
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.osvdb.orghttp://www.osvdb.org/35245↗www.securityfocus.comhttp://www.securityfocus.com/bid/24330↗www.vupen.comhttp://www.vupen.com/english/advisories/2007/2072↗supportconnectw.ca.comhttp://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-securitynotice.asp↗www.kb.cert.orghttp://www.kb.cert.org/vuls/id/105105↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/470602/100/0/threaded↗exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/34737↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/470754/100/0/threaded↗secunia.comhttp://secunia.com/advisories/25570↗www.securitytracker.comhttp://www.securitytracker.com/id?1018199↗www.zerodayinitiative.comhttp://www.zerodayinitiative.com/advisories/ZDI-07-035.html↗