Vulnerability Intelligence Report
CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.
No Active Exploit Signals
CVSS Base Score
9.3
HIGH
EPSS Probability:7.61%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| broadcom | anti-virus | 2007, 2008 |
| broadcom | anti-virus_for_the_enterprise | 7.1, r8 |
| broadcom | anti-virus_sdk | all |
| broadcom | common_services | 11, 11.1 |
| broadcom | etrust_antivirus | 7.1, 8, 8.1 |
| broadcom | etrust_integrated_threat_management | 8.1 |
| broadcom | etrust_intrusion_detection | 3.0 |
| broadcom | etrust_secure_content_manager | 1.1 |
| broadcom | internet_security_suite | 3.0 |
| broadcom | network_and_systems_management | r3.0, r3.1, r11, r11.1 |
| broadcom | secure_content_manager | 1.1, 8.0 |
| broadcom | unicenter_network_and_systems_management | 3.0, 3.1, 11, 11.1 |
| ca | anti-virus | 2009 |
| ca | anti-virus_for_the_enterprise | r8.1 |
| ca | anti-virus_gateway | 7.1 |
| ca | anti-virus_plus | 2009 |
| ca | arcserve_backup | r11.5, r11.1 |
| ca | arcserve_for_windows_client_agent | all |
| ca | arcserve_for_windows_server_component | all |
| ca | common_services | 3.1 |
| ca | etrust_anti-virus_gateway | 7.1 |
| ca | etrust_anti-virus_sdk | all |
| ca | etrust_ez_antivirus | r7.1 |
| ca | etrust_intrusion_detection | 2.0, 3.0 |
| ca | etrust_secure_content_manager | 8.0 |
| ca | gateway_security | r8.1 |
| ca | internet_security_suite_2008 | all |
| ca | internet_security_suite_plus_2008 | all |
| ca | internet_security_suite_plus_2009 | all |
| ca | protection_suites | r2, r3, r3.1 |
| ca | threat_manager | 8.1, r8 |
| ca | threat_manager_total_defense | all |
| linux | linux_kernel | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
7.605%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2009-10-08T00:00:00 |
| Published | 2009-10-13T10:00:00 |
| Patch Date | 2009-10-09 |
| Last Updated | 2024-08-07T06:31:10 |
Community Chatter & Buzz