CVE-2007-3302: Critical severity Broadcom Etrust Intrusion Detection vulnerability
The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified "scriptable functions."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3302?
CVE-2007-3302 is considered high severity due to its ability to allow remote code execution.
How do I fix CVE-2007-3302?
Fix CVE-2007-3302 by upgrading to the patched version of CA eTrust Intrusion Detection 3.0 SP1 3.0.5.81 or later.
What types of attacks are possible with CVE-2007-3302?
With CVE-2007-3302, attackers can potentially load and execute arbitrary DLLs on the client system.
Which versions of CA eTrust Intrusion Detection are affected by CVE-2007-3302?
CVE-2007-3302 affects CA eTrust Intrusion Detection versions prior to 3.0.5.81 and 3.0 before 20070713.
Can CVE-2007-3302 be exploited remotely?
Yes, CVE-2007-3302 can be exploited remotely via unpatched ActiveX control vulnerabilities.