CVE-2007-4347: Symantec Backupexec System Recovery

High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to cause a denial of service (CPU and memory consumption) via a crafted packet to port 5633/tcp, which triggers an infinite loop.

Affected products

• Symantec Backupexec System Recovery: version 11.0.6235 only; version 11.0.7170 only

Published 2007-11-29. Last modified 2026-06-16.