CVE-2007-3825 in the critical feed json
Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert No…
published 2007-07-18 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-3809
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 14.0%
- EPSS 14.0% chance of exploitation in 30 days, percentile 96%
- public exploits
- 0
- none known
Summary
Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allow remote attackers to execute arbitrary code by sending certain data to unspecified RPC procedures.
Patch / fix
Exploit prediction
14.03% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
References
-
secunia.com
/advisories/26088
third-party-advisory, patch, vendor-advisory
-
supportconnectw.ca.com
/public/antivirus/infodocs/caantivirus-secnotice.asp
patch
-
labs.idefense.com
/intelligence/vulnerabilities/display.php?id=561
third-party-advisory, vendor-advisory
-
securitytracker.com
/id?1018405
vdb-entry
-
securitytracker.com
/id?1018402
vdb-entry
-
securitytracker.com
/id?1018404
vdb-entry
-
securityfocus.com
/bid/24947
vdb-entry
-
securitytracker.com
/id?1018406
vdb-entry
-
securitytracker.com
/id?1018403
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/35467
vdb-entry
-
vupen.com
/english/advisories/2007/2559
vdb-entry
Sources
- CVE List CVE-2007-3825
- NVD CVE-2007-3825
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.