CVE-2007-4620
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service ...
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.
Exploit likelihood
What each source reports
NVD Score used
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.
- Record
CVE-2007-4620- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.
- Record
CVE-2007-4620- Updated
- 2026-11-02
EUVDEUVD-2007-4602 No score
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.
- Record
EUVD-2007-4602- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2gp6-x3qj-wq4m No score
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service ...
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.
- Record
GHSA-2gp6-x3qj-wq4m- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Computer Associates - Alert Notification Buffer Overflow (Metasploit) | 2010-04-30 |
| Metasploit | Computer Associates Alert Notification Buffer Overflow | 2008-04-04 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, Metasploit | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4620 is a high vulnerability (CVSS 9.0) in Broadcom Anti-virus For The Enterprise, published April 7, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 52.3%, the 98th percentile. No source names a fixed version.
References
securitytracker.com/id?1019790
securityreason.com/securityalert/3799
support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103
exchange.xforce.ibmcloud.com/vulnerabilities/41639
community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx