CVE-2007-4620: Broadcom Anti-Virus For The Enterprise

High severity, CVSS 9.0. EPSS: 52.3% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.

Affected products

• Broadcom Anti-Virus For The Enterprise: version 7.1 only; version 8 only; version 8.1 only
• Broadcom Brightstor Arcserve Backup: version 11.1 only; version 11.5 only
• Ca Brightstor Arcserve Backup: version 11 only
• Ca Threat Manager For The Enterprise: version r8 only; version r8.1 only

Published 2008-04-07. Last modified 2026-06-16.