CVEvulnerability

CVE-2009-3587

9.3 HIGH Published 2009-10-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-10-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.

Affected configurations

• broadcom anti-virus 2007 • broadcom anti-virus 2008 • broadcom anti-virus for the enterprise 7.1 • broadcom anti-virus for the enterprise r8 • broadcom anti-virus sdk • broadcom common services 11 • broadcom common services 11.1 • broadcom etrust antivirus 7.1 • broadcom etrust antivirus 8 • broadcom etrust antivirus 8.1 • broadcom etrust integrated threat management 8.1 • broadcom etrust intrusion detection 3.0 • broadcom etrust secure content manager 1.1 • broadcom internet security suite • broadcom internet security suite 3.0 • broadcom network and systems management r3.0 • broadcom network and systems management r3.1 • broadcom network and systems management r11 • broadcom network and systems management r11.1 • broadcom secure content manager 1.1 • broadcom secure content manager 8.0 • broadcom unicenter network and systems management 3.0 • broadcom unicenter network and systems management 3.1 • broadcom unicenter network and systems management 11 • broadcom unicenter network and systems management 11.1 • ca anti-virus 2009 • ca anti-virus for the enterprise r8.1 • ca anti-virus gateway 7.1 • ca anti-virus plus 2009 • ca arcserve backup r11.5 • ca arcserve for windows client agent • ca arcserve for windows server component • ca common services 3.1 • ca etrust anti-virus gateway 7.1 • ca etrust anti-virus sdk • ca etrust ez antivirus r7.1 • ca etrust intrusion detection 2.0 • ca etrust intrusion detection 3.0 • ca etrust secure content manager 8.0 • ca gateway security r8.1 • ca internet security suite 2008 • ca internet security suite plus 2008 • ca internet security suite plus 2009 • ca protection suites r2 • ca protection suites r3 • ca protection suites r3.1 • ca threat manager 8.1 • ca threat manager r8 • ca threat manager total defense • ca arcserve backup r11.1

References