Broadcom: >> Etrust Ez Antivirus >> 7.0 Security Vulnerabilities
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.
CVSS Score
9.3
EPSS Score
0.814
Published
2007-06-06
Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe.
CVSS Score
7.2
EPSS Score
0.0
Published
2005-01-10