CVE-2007-3302
The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 10.8%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified "scriptable functions."
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 10.79% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- broadcom/etrust intrusion detection · ca/etrust intrusion detection
- Source
- cve@mitre.org
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=568Patch
- http://secunia.com/advisories/26134Patch, Vendor Advisory
- http://supportconnectw.ca.com/public/etrust/etrust_intrusion/infodocs/eid-callervilnsecnot.aspPatch
- http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149811
- http://www.securityfocus.com/archive/1/474599/100/0/threaded
- http://www.securityfocus.com/bid/25050Patch
- http://www.securitytracker.com/id?1018447
- http://www.vupen.com/english/advisories/2007/2640
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35565
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=568Patch
- http://secunia.com/advisories/26134Patch, Vendor Advisory
- http://supportconnectw.ca.com/public/etrust/etrust_intrusion/infodocs/eid-callervilnsecnot.aspPatch
- http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149811
- http://www.securityfocus.com/archive/1/474599/100/0/threaded
- http://www.securityfocus.com/bid/25050Patch
- http://www.securitytracker.com/id?1018447
- http://www.vupen.com/english/advisories/2007/2640
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35565
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.