CVE-2009-0042
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.27%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 4.27% probability · 91th percentile
- CISA KEV
- Not listed
- Affected
- broadcom/anti-spyware · broadcom/anti-spyware for the enterprise · broadcom/anti-virus · broadcom/anti-virus for the enterprise · broadcom/anti-virus sdk · broadcom/antivirus gateway · broadcom/arcserve client agent · broadcom/common services · broadcom/etrust ez antivirus · broadcom/etrust intrusion detection · broadcom/network and systems management · broadcom/secure content manager · ca/arcserve backup · ca/etrust intrusion detection · ca/internet security suite 2007 · ca/internet security suite 2008 · ca/internet security suite plus 2008 · ca/protection suites · ca/threat manager for the enterprise
- Source
- cve@mitre.org
References
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspxVendor Advisory
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601
- http://www.securityfocus.com/archive/1/500417/100/0/threaded
- http://www.securityfocus.com/bid/33464
- http://www.securitytracker.com/id?1021639
- http://www.vupen.com/english/advisories/2009/0270
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48261
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspxVendor Advisory
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601
- http://www.securityfocus.com/archive/1/500417/100/0/threaded
- http://www.securityfocus.com/bid/33464
- http://www.securitytracker.com/id?1021639
- http://www.vupen.com/english/advisories/2009/0270
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48261
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.