Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Anti-spyware | Broadcom | 2007 (including) | 2007 (including) |
| Anti-spyware | Broadcom | 2008 (including) | 2008 (including) |
| Anti-spyware_for_the_enterprise | Broadcom | 8.1 (including) | 8.1 (including) |
| Anti-spyware_for_the_enterprise | Broadcom | r8 (including) | r8 (including) |
| Anti-virus | Broadcom | 2007-8 (including) | 2007-8 (including) |
| Anti-virus | Broadcom | 2008 (including) | 2008 (including) |
| Anti-virus_for_the_enterprise | Broadcom | 7.1 (including) | 7.1 (including) |
| Anti-virus_for_the_enterprise | Broadcom | 8.1 (including) | 8.1 (including) |
| Anti-virus_for_the_enterprise | Broadcom | r8 (including) | r8 (including) |
| Anti-virus_sdk | Broadcom | * | * |
| Antivirus_gateway | Broadcom | 7.1 (including) | 7.1 (including) |
| Arcserve_client_agent | Broadcom | - (including) | - (including) |
| Common_services | Broadcom | 11 (including) | 11 (including) |
| Common_services | Broadcom | 11.1 (including) | 11.1 (including) |
| Etrust_ez_antivirus | Broadcom | r6.1 (including) | r6.1 (including) |
| Etrust_ez_antivirus | Broadcom | r7 (including) | r7 (including) |
| Etrust_intrusion_detection | Broadcom | 3.0 (including) | 3.0 (including) |
| Etrust_intrusion_detection | Broadcom | 4.0 (including) | 4.0 (including) |
| Network_and_systems_management | Broadcom | r3.0 (including) | r3.0 (including) |
| Network_and_systems_management | Broadcom | r3.1 (including) | r3.1 (including) |
| Network_and_systems_management | Broadcom | r11 (including) | r11 (including) |
| Network_and_systems_management | Broadcom | r11.1 (including) | r11.1 (including) |
| Secure_content_manager | Broadcom | 8.0 (including) | 8.0 (including) |
| Secure_content_manager | Broadcom | 8.1 (including) | 8.1 (including) |
| Arcserve_backup | Ca | r11.1-nil (including) | r11.1-nil (including) |
| Arcserve_backup | Ca | r11.5_nil_-linux (including) | r11.5_nil_-linux (including) |
| Arcserve_backup | Ca | r11.5_nil_-windows (including) | r11.5_nil_-windows (including) |
| Arcserve_backup | Ca | r12.0_nil_-windows (including) | r12.0_nil_-windows (including) |
| Etrust_intrusion_detection | Ca | 2.0-sp1 (including) | 2.0-sp1 (including) |
| Etrust_intrusion_detection | Ca | 3.0-sp1 (including) | 3.0-sp1 (including) |
| Internet_security_suite_2007 | Ca | 3 (including) | 3 (including) |
| Internet_security_suite_2008 | Ca | * | * |
| Internet_security_suite_plus_2008 | Ca | * | * |
| Protection_suites | Ca | r2 (including) | r2 (including) |
| Protection_suites | Ca | r3 (including) | r3 (including) |
| Protection_suites | Ca | r3.1 (including) | r3.1 (including) |
| Threat_manager_for_the_enterprise | Ca | 8.1 (including) | 8.1 (including) |
| Threat_manager_for_the_enterprise | Ca | r8 (including) | r8 (including) |
References
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspx
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601
- http://www.securityfocus.com/archive/1/500417/100/0/threaded
- http://www.securityfocus.com/bid/33464
- http://www.securitytracker.com/id?1021639
- http://www.vupen.com/english/advisories/2009/0270
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48261
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspx
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601
- http://www.securityfocus.com/archive/1/500417/100/0/threaded
- http://www.securityfocus.com/bid/33464
- http://www.securitytracker.com/id?1021639
- http://www.vupen.com/english/advisories/2009/0270
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48261