Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Anti-virus | Broadcom | 2007-8 (including) | 2007-8 (including) |
| Anti-virus | Broadcom | 2008 (including) | 2008 (including) |
| Anti-virus_for_the_enterprise | Broadcom | 7.1 (including) | 7.1 (including) |
| Anti-virus_for_the_enterprise | Broadcom | r8 (including) | r8 (including) |
| Anti-virus_sdk | Broadcom | * | * |
| Common_services | Broadcom | 11 (including) | 11 (including) |
| Common_services | Broadcom | 11.1 (including) | 11.1 (including) |
| Etrust_antivirus | Broadcom | 7.1 (including) | 7.1 (including) |
| Etrust_antivirus | Broadcom | 8 (including) | 8 (including) |
| Etrust_antivirus | Broadcom | 8.1 (including) | 8.1 (including) |
| Etrust_integrated_threat_management | Broadcom | 8.1 (including) | 8.1 (including) |
| Etrust_intrusion_detection | Broadcom | 3.0 (including) | 3.0 (including) |
| Etrust_secure_content_manager | Broadcom | 1.1 (including) | 1.1 (including) |
| Internet_security_suite | Broadcom | * | * |
| Internet_security_suite | Broadcom | 3.0 (including) | 3.0 (including) |
| Network_and_systems_management | Broadcom | r3.0 (including) | r3.0 (including) |
| Network_and_systems_management | Broadcom | r3.1 (including) | r3.1 (including) |
| Network_and_systems_management | Broadcom | r11 (including) | r11 (including) |
| Network_and_systems_management | Broadcom | r11.1 (including) | r11.1 (including) |
| Secure_content_manager | Broadcom | 1.1 (including) | 1.1 (including) |
| Secure_content_manager | Broadcom | 8.0 (including) | 8.0 (including) |
| Unicenter_network_and_systems_management | Broadcom | 3.0 (including) | 3.0 (including) |
| Unicenter_network_and_systems_management | Broadcom | 3.1 (including) | 3.1 (including) |
| Unicenter_network_and_systems_management | Broadcom | 11 (including) | 11 (including) |
| Unicenter_network_and_systems_management | Broadcom | 11.1 (including) | 11.1 (including) |
| Anti-virus | Ca | 2009 (including) | 2009 (including) |
| Anti-virus_for_the_enterprise | Ca | r8.1 (including) | r8.1 (including) |
| Anti-virus_gateway | Ca | 7.1 (including) | 7.1 (including) |
| Anti-virus_plus | Ca | 2009 (including) | 2009 (including) |
| Arcserve_backup | Ca | r11.5 (including) | r11.5 (including) |
| Arcserve_for_windows_client_agent | Ca | * | * |
| Arcserve_for_windows_server_component | Ca | * | * |
| Common_services | Ca | 3.1 (including) | 3.1 (including) |
| Etrust_anti-virus_gateway | Ca | 7.1 (including) | 7.1 (including) |
| Etrust_anti-virus_sdk | Ca | * | * |
| Etrust_ez_antivirus | Ca | r7.1 (including) | r7.1 (including) |
| Etrust_intrusion_detection | Ca | 2.0-sp1 (including) | 2.0-sp1 (including) |
| Etrust_intrusion_detection | Ca | 3.0-sp1 (including) | 3.0-sp1 (including) |
| Etrust_secure_content_manager | Ca | 8.0 (including) | 8.0 (including) |
| Gateway_security | Ca | r8.1 (including) | r8.1 (including) |
| Internet_security_suite_2008 | Ca | * | * |
| Internet_security_suite_plus_2008 | Ca | * | * |
| Internet_security_suite_plus_2009 | Ca | * | * |
| Protection_suites | Ca | r2 (including) | r2 (including) |
| Protection_suites | Ca | r3 (including) | r3 (including) |
| Protection_suites | Ca | r3.1 (including) | r3.1 (including) |
| Threat_manager | Ca | 8.1 (including) | 8.1 (including) |
| Threat_manager | Ca | r8 (including) | r8 (including) |
| Threat_manager_total_defense | Ca | * | * |
References
- http://osvdb.org/58691
- http://secunia.com/advisories/36976
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878
- http://www.securityfocus.com/archive/1/507068/100/0/threaded
- http://www.securityfocus.com/bid/36653
- http://www.securitytracker.com/id?1022999
- http://www.vupen.com/english/advisories/2009/2852
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53697
- http://osvdb.org/58691
- http://secunia.com/advisories/36976
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878
- http://www.securityfocus.com/archive/1/507068/100/0/threaded
- http://www.securityfocus.com/bid/36653
- http://www.securitytracker.com/id?1022999
- http://www.vupen.com/english/advisories/2009/2852
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53697