CVE-2007-3302

The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified "scriptable functions."

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=568	Patch
http://supportconnectw.ca.com/public/etrust/etrust_intrusion/infodocs/eid-callervilnsecnot.asp	Patch
http://www.securityfocus.com/bid/25050	Patch
http://secunia.com/advisories/26134	Patch Vendor Advisory
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149811
http://www.securitytracker.com/id?1018447
http://www.vupen.com/english/advisories/2007/2640
https://exchange.xforce.ibmcloud.com/vulnerabilities/35565
http://www.securityfocus.com/archive/1/474599/100/0/threaded

Configuration 1

cpe:2.3:a:ca:etrust_intrusion_detection:3.05.81:*:*:*:*:*:*:* cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:* cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*

---

Published : 2007-07-26 12:30

Updated : 2021-04-09 02:32

---

NVD link : CVE-2007-3302

Mitre link : CVE-2007-3302

No products.

NVD-CWE-Other