Vulnerability Intelligence Report
CVE-2009-0042
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.
No Active Exploit Signals
CVSS Base Score
10.0
HIGH
EPSS Probability:4.27%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| broadcom | anti-spyware | 2007, 2008 |
| broadcom | anti-spyware_for_the_enterprise | 8.1, r8 |
| broadcom | anti-virus | 2007, 2008 |
| broadcom | anti-virus_for_the_enterprise | 7.1, 8.1, r8 |
| broadcom | anti-virus_sdk | all |
| broadcom | antivirus_gateway | 7.1 |
| broadcom | arcserve_client_agent | all |
| broadcom | common_services | 11, 11.1 |
| broadcom | etrust_ez_antivirus | r6.1, r7 |
| broadcom | etrust_intrusion_detection | 3.0, 4.0 |
| broadcom | network_and_systems_management | r3.0, r3.1, r11, r11.1 |
| broadcom | secure_content_manager | 8.0, 8.1 |
| ca | arcserve_backup | r11.1, r11.5_nil_, r12.0_nil_ |
| ca | etrust_intrusion_detection | 2.0, 3.0 |
| ca | internet_security_suite_2007 | 3 |
| ca | internet_security_suite_2008 | all |
| ca | internet_security_suite_plus_2008 | all |
| ca | protection_suites | r2, r3, r3.1 |
| ca | threat_manager_for_the_enterprise | 8.1, r8 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
4.268%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2009-01-07T00:00:00 |
| Published | 2009-01-28T01:00:00 |
| Patch Date | 2009-01-27 |
| Last Updated | 2024-08-07T04:17:10 |
Community Chatter & Buzz