{"id":"CVE-2009-3587","url":"https://www.cyber-defence.io/tools/cve/CVE-2009-3587","generatedAt":"2026-10-27T19:38:58.680Z","title":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3)…","description":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.","published":"2009-10-13T10:30:01.000Z","lastModified":"2026-06-16T23:11:57.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":9.3,"severity":"HIGH","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C"},"cwe":[],"affected":["broadcom/anti-virus","broadcom/anti-virus for the enterprise","broadcom/anti-virus sdk","broadcom/common services","broadcom/etrust antivirus","broadcom/etrust integrated threat management","broadcom/etrust intrusion detection","broadcom/etrust secure content manager","broadcom/internet security suite","broadcom/network and systems management","broadcom/secure content manager","broadcom/unicenter network and systems management","ca/anti-virus","ca/anti-virus for the enterprise","ca/anti-virus gateway","ca/anti-virus plus","ca/arcserve backup","ca/arcserve for windows client agent","ca/arcserve for windows server component","ca/common services","ca/etrust anti-virus gateway","ca/etrust anti-virus sdk","ca/etrust ez antivirus","ca/etrust intrusion detection","ca/etrust secure content manager","ca/gateway security","ca/internet security suite 2008","ca/internet security suite plus 2008","ca/internet security suite plus 2009","ca/protection suites","ca/threat manager","ca/threat manager total defense"],"epss":{"score":0.07605,"percentile":0.94509,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (7.61%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://osvdb.org/58691","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36976","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878","tags":["Broken Link","Patch","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507068/100/0/threaded","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36653","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022999","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2852","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53697","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://osvdb.org/58691","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36976","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878","tags":["Broken Link","Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507068/100/0/threaded","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36653","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022999","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2852","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53697","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-3587","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}