CVE:CVE-2007-2864
CNNVD:CNNVD-200706-098
Computer Associates是世界领先的安全厂商，产品包括多种杀毒软件及备份恢复系统。
多个CA产品的杀毒引擎在解析包含畸形字段的.CAB文档时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制系统。
如果.CAB文档中包含有超长coffFiles字段的话，就可能在解析此文档时触发这个溢出，导致执行任意指令。
solution:Upgrade broadcom anti-virus_for_the_enterprise to a higher version than 8,and avoid the version 8; Upgrade broadcom brightstor_arcserve_backup to a higher version than 9.01,10.5,11,11.1,11.5,and avoid the version 9.01,10.5,11,11.1,11.5; Upgrade broadcom common_services to a higher version than 1.0,1.1,2.0,2.1,2.2,3.0,and avoid the version 1.0,1.1,2.0,2.1,2.2,3.0; Upgrade broadcom etrust_antivirus to a higher version than 8.0,8.1,and avoid the version 8.0,8.1; Upgrade broadcom etrust_antivirus_gateway to a higher version than 7.1,and avoid the version 7.1; Upgrade broadcom etrust_antivirus_sdk to a higher version than *; Upgrade broadcom etrust_ez_antivirus to a higher version than 6.1,7.0,and avoid the version 6.1,7.0; Upgrade broadcom etrust_ez_armor to a higher version than 1.0,2.0,3.0,3.1,and avoid the version 1.0,2.0,3.0,3.1; Upgrade broadcom integrated_threat_management to a higher version than 8.0,and avoid the version 8.0; Upgrade broadcom internet_security_suite to a higher version than 1.0,2.0,3.0,and avoid the version 1.0,2.0,3.0; Upgrade broadcom unicenter_network_and_systems_management to a higher version than 3.0,3.1,11,11.1,and avoid the version 3.0,3.1,11,11.1; Upgrade ca etrust_secure_content_manager to a higher version than 8.0,and avoid the version 8.0; Upgrade ca protection_suites to a higher version than r2,r3,and avoid the version r2,r3