Broadcom Integrated Threat Management vulnerabilities

3 CVEs affecting Broadcom Integrated Threat Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2864, published 2007-06-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-2864, published 2007-06-06. High severity, CVSS 9.3. EPSS: 49.9% chance of exploitation in the next 30 days. Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large…
CVE-2006-3223, published 2006-06-27. High severity, CVSS 7.5. EPSS: 6.7% chance of exploitation in the next 30 days. Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute…
CVE-2007-2523, published 2007-05-11. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify…