First, let's clarify what is meant by a static arp entry. The Address Resolution Protocol is used to map the layer 2 address to the layer 3 address, typically this is Ethernet and IP. A static arp entry means that you always expect a specific IP to be at a given hardware address. With a default Windows or Linux implementation, you will be using a TCP/IP stack and cannot just do straight communication with just layer 2 addresses.
The switch is relatively dumb device, it determines where to send traffic, but what traffic it receives. With no information about the destination, the switch will send any given input out all other ports. Once a message is sent through input, the switch will update its CAM table and say "anyone looking to send to that address I will send out that port", i.e., the source for an input can be used as the destination for later outputs.
With this knowledge, now we can consider the exploit. The first possibility is to break the functionality which decides to only send the output out one port and send to all ports on the switch. You may be able to overload the switch so that it keeps filling up the CAM table resulting in the entries with Alice and Bob's location to be lost. You may also be able to compromise the switch itself through a vulnerability or misconfiguration. Depending on the model maybe you can install sniffing utilities on the switch itself, or maybe you can turn your port into a span/mirror port, and then you can monitor traffic or redirect traffic.
For an overflow attack, read more about dsniff/macof.
Unless you are using some mechanisms on the switch or some type of 802.1x which fixes the MAC address to a given port, you should be able to overwrite entries in the CAM table. The switch usually will not assume a piece of hardware is always attached to a particular physical port. So Eve can simply lie and tell the switch that she has Bob or Alice's MAC address. Then the switch will update the CAM table and will direct the traffic to me. This might not always be effective if there is little other traffic to update the ARP table though. If you tell the switch that you are Bob, you will clearly not be able to then send traffic to Bob, because the switch think your port is also Bob's port unless Bob sends out traffic to update the CAM table. In ARP poisioning is an attack on the host, but you can also attack at the point of the switch.