CVE-2009-0042
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.
- Score
- CVSS 2.0 10.0 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2009-01-28
- Last modified
- 2024-08-07
Affected products
- Anti-spyware (Broadcom)
- Anti-spyware For The Enterprise (Broadcom)
- Anti-virus (Broadcom)
- Anti-virus For The Enterprise (Broadcom)
- Anti-virus Sdk (Broadcom)
- Antivirus Gateway (Broadcom)
- Arcserve Client Agent (Broadcom)
- Common Services (Broadcom)
- Etrust Ez Antivirus (Broadcom)
- Etrust Intrusion Detection (Broadcom)
- Network And Systems Management (Broadcom)
- Secure Content Manager (Broadcom)
- Arcserve Backup (Ca)
- Etrust Intrusion Detection (Ca)
- Internet Security Suite 2007 (Ca)
- Internet Security Suite 2008 (Ca)
- Internet Security Suite Plus 2008 (Ca)
- Protection Suites (Ca)
- Threat Manager For The Enterprise (Ca)
References
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-ev…
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601
- http://www.securityfocus.com/archive/1/500417/100/0/threaded
- http://www.securityfocus.com/bid/33464
- http://www.securitytracker.com/id?1021639
- http://www.vupen.com/english/advisories/2009/0270
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48261
