CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.
- Score
- CVSS 2.0 9.3 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2009-10-13
- Last modified
- 2024-08-07
Affected products
- Anti-virus (Broadcom)
- Anti-virus For The Enterprise (Broadcom)
- Anti-virus Sdk (Broadcom)
- Common Services (Broadcom)
- Etrust Antivirus (Broadcom)
- Etrust Integrated Threat Management (Broadcom)
- Etrust Intrusion Detection (Broadcom)
- Etrust Secure Content Manager (Broadcom)
- Internet Security Suite (Broadcom)
- Network And Systems Management (Broadcom)
- Secure Content Manager (Broadcom)
- Unicenter Network And Systems Management (Broadcom)
- Anti-virus (Ca)
- Anti-virus For The Enterprise (Ca)
- Anti-virus Gateway (Ca)
- Anti-virus Plus (Ca)
- Arcserve Backup (Ca)
- Arcserve For Windows Client Agent (Ca)
- Arcserve For Windows Server Component (Ca)
- Common Services (Ca)
- Etrust Anti-virus Gateway (Ca)
- Etrust Anti-virus Sdk (Ca)
- Etrust Ez Antivirus (Ca)
- Etrust Intrusion Detection (Ca)
- Etrust Secure Content Manager (Ca)
- Gateway Security (Ca)
- Internet Security Suite 2008 (Ca)
- Internet Security Suite Plus 2008 (Ca)
- Internet Security Suite Plus 2009 (Ca)
- Protection Suites (Ca)
- Threat Manager (Ca)
- Threat Manager Total Defense (Ca)
References
- http://osvdb.org/58691
- http://secunia.com/advisories/36976
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878
- http://www.securityfocus.com/archive/1/507068/100/0/threaded
- http://www.securityfocus.com/bid/36653
- http://www.securitytracker.com/id?1022999
- http://www.vupen.com/english/advisories/2009/2852
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53697
