9.3

CVE-2009-3587

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Broadcom ≫ Anti-virus Version 2007 Update 8
Broadcom ≫ Anti-virus Version 2008
Broadcom ≫ Common Services Version 11
Broadcom ≫ Common Services Version 11.1
Broadcom ≫ Etrust Antivirus Version 7.1
Broadcom ≫ Etrust Antivirus Version 8
Broadcom ≫ Etrust Antivirus Version 8.1
Ca ≫ Anti-virus Version 2009
Ca ≫ Anti-virus Gateway Version 7.1
Ca ≫ Anti-virus Plus Version 2009
Ca ≫ Arcserve Backup Version r11.5
Ca ≫ Common Services Version 3.1
Ca ≫ Etrust Anti-virus Gateway Version 7.1
Ca ≫ Etrust Ez Antivirus Version r7.1
Ca ≫ Etrust Intrusion Detection Version 2.0 Update sp1
Ca ≫ Etrust Intrusion Detection Version 3.0 Update sp1
Ca ≫ Gateway Security Version r8.1
Ca ≫ Protection Suites Version r2
Ca ≫ Protection Suites Version r3
Ca ≫ Protection Suites Version r3.1
Ca ≫ Threat Manager Version 8.1 Edition enterprise
Ca ≫ Threat Manager Version r8 Edition enterprise
Ca ≫ Arcserve Backup Version r11.1
   Linux ≫ Linux Kernel Version -
Ca ≫ Arcserve Backup Version r11.5
   Linux ≫ Linux Kernel Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.61% 0.938
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://osvdb.org/58691
Broken Link
http://secunia.com/advisories/36976
Third Party Advisory
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878
Patch
Vendor Advisory
Broken Link
http://www.securityfocus.com/archive/1/507068/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/36653
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022999
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2009/2852
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53697
Third Party Advisory
VDB Entry