CVEvulnerability

CVE-2009-0042

10.0 HIGH Published 2009-01-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-01-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.

Affected configurations

• broadcom anti-spyware 2007 • broadcom anti-spyware 2008 • broadcom anti-spyware for the enterprise 8.1 • broadcom anti-spyware for the enterprise r8 • broadcom anti-virus 2007 • broadcom anti-virus 2008 • broadcom anti-virus for the enterprise 7.1 • broadcom anti-virus for the enterprise 8.1 • broadcom anti-virus for the enterprise r8 • broadcom anti-virus sdk • broadcom antivirus gateway 7.1 • broadcom arcserve client agent • broadcom common services 11 • broadcom common services 11.1 • broadcom etrust ez antivirus r6.1 • broadcom etrust ez antivirus r7 • broadcom etrust intrusion detection 3.0 • broadcom etrust intrusion detection 4.0 • broadcom network and systems management r3.0 • broadcom network and systems management r3.1 • broadcom network and systems management r11 • broadcom network and systems management r11.1 • broadcom secure content manager 8.0 • broadcom secure content manager 8.1 • ca arcserve backup r11.1 • ca arcserve backup r11.5 nil • ca arcserve backup r12.0 nil • ca etrust intrusion detection 2.0 • ca etrust intrusion detection 3.0 • ca internet security suite 2007 3 • ca internet security suite 2008 • ca internet security suite plus 2008 • ca protection suites r2 • ca protection suites r3 • ca protection suites r3.1 • ca threat manager for the enterprise 8.1 • ca threat manager for the enterprise r8

References