CVE-2007-3336 json
Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (formerly Compu…
published 2007-06-22 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-3326
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 9.0%
- EPSS 9.0% chance of exploitation in 30 days, percentile 95%
- public exploits
- 1
- Exploit-DB
Summary
Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (formerly Computer Associates) products, allow remote attackers to execute arbitrary code by sending certain TCP data at different times to the Ingres Communications Server Process (iigcc), which calls the (1) QUinsert or (2) QUremove functions with attacker-controlled input.
Patch / fix
Timeline
- Published
- First public exploit (EDB-14646)
Exploit prediction
8.96% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-14646 CA Advantage Ingres 2.6 - Multiple Buffer Overflow Vulnerabilities (PoC) dos, 2010-08-14
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
-
supportconnectw.ca.com
/public/ca_common_docs/ingresvuln_letter.asp
patch
-
vupen.com
/english/advisories/2007/2288
vdb-entry, vendor-advisory
-
secunia.com
/advisories/25756
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/25775
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2007/2290
vdb-entry, vendor-advisory
- ca.com /us/securityadvisor/newsinfo/collateral.aspx?cid=145778
-
exchange.xforce.ibmcloud.com
/vulnerabilities/34993
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/35000
vdb-entry
-
securityfocus.com
/bid/24585
vdb-entry
-
osvdb.org
/37486
vdb-entry
-
archives.neohapsis.com
/archives/bugtraq/2007-06/0302.html
mailing-list
-
securityfocus.com
/archive/1/472193/100/0/threaded
mailing-list
- ngssoftware.com /advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-1/
- ngssoftware.com /advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-2/
Sources
- CVE List CVE-2007-3336
- NVD CVE-2007-3336
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.