4.3

CVE-2007-3875

arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Broadcom ≫ Anti-spyware Version 2007
Broadcom ≫ Common Services Version 11
Broadcom ≫ Common Services Version 11.1
Broadcom ≫ Etrust Antivirus Version 8
Broadcom ≫ Etrust Ez Antivirus Version 6.1
Broadcom ≫ Etrust Ez Armor Version 1
Broadcom ≫ Etrust Ez Armor Version 2
Broadcom ≫ Etrust Ez Armor Version 3
Broadcom ≫ Threat Manager Version 8
Ca ≫ Brightstor Arcserve Backup Version 11 Edition windows
Ca ≫ Etrust Intrusion Detection Version 3.0 Update sp1
Ca ≫ Protection Suites Version r2
Ca ≫ Protection Suites Version r3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.54% 0.878
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/archive/1/474683/100/0/threaded
http://www.securitytracker.com/id?1018450
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=567
Patch
http://secunia.com/advisories/26155
Patch
Vendor Advisory
http://supportconnectw.ca.com/public/antivirus/infodocs/caprodarclib-secnot.asp
Patch
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149847
http://www.securityfocus.com/archive/1/474601/100/0/threaded
http://www.securityfocus.com/archive/1/474605/100/100/threaded
http://www.securityfocus.com/bid/25049
Patch
http://www.vupen.com/english/advisories/2007/2639
https://exchange.xforce.ibmcloud.com/vulnerabilities/35573