CVEvulnerability
CVE-2009-0042
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-01-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.
Affected configurations
• broadcom anti-spyware 2007
• broadcom anti-spyware 2008
• broadcom anti-spyware for the enterprise 8.1
• broadcom anti-spyware for the enterprise r8
• broadcom anti-virus 2007
• broadcom anti-virus 2008
• broadcom anti-virus for the enterprise 7.1
• broadcom anti-virus for the enterprise 8.1
• broadcom anti-virus for the enterprise r8
• broadcom anti-virus sdk
• broadcom antivirus gateway 7.1
• broadcom arcserve client agent
• broadcom common services 11
• broadcom common services 11.1
• broadcom etrust ez antivirus r6.1
• broadcom etrust ez antivirus r7
• broadcom etrust intrusion detection 3.0
• broadcom etrust intrusion detection 4.0
• broadcom network and systems management r3.0
• broadcom network and systems management r3.1
• broadcom network and systems management r11
• broadcom network and systems management r11.1
• broadcom secure content manager 8.0
• broadcom secure content manager 8.1
• ca arcserve backup r11.1
• ca arcserve backup r11.5 nil
• ca arcserve backup r12.0 nil
• ca etrust intrusion detection 2.0
• ca etrust intrusion detection 3.0
• ca internet security suite 2007 3
• ca internet security suite 2008
• ca internet security suite plus 2008
• ca protection suites r2
• ca protection suites r3
• ca protection suites r3.1
• ca threat manager for the enterprise 8.1
• ca threat manager for the enterprise r8
References
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspx Vendor Advisory
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601 support.ca.com
- http://www.securityfocus.com/archive/1/500417/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33464 www.securityfocus.com
- http://www.securitytracker.com/id?1021639 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/0270 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48261 exchange.xforce.ibmcloud.com
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspx Vendor Advisory
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601 support.ca.com
- http://www.securityfocus.com/archive/1/500417/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33464 www.securityfocus.com
- http://www.securitytracker.com/id?1021639 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/0270 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48261 exchange.xforce.ibmcloud.com