9.3

CVE-2009-3587

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Broadcom ≫ Anti-virus Version2007 Update8
Broadcom ≫ Anti-virus Version2008
Broadcom ≫ Common Services Version11
Broadcom ≫ Common Services Version11.1
Broadcom ≫ Etrust Antivirus Version7.1
Broadcom ≫ Etrust Antivirus Version8
Broadcom ≫ Etrust Antivirus Version8.1
Ca ≫ Anti-virus Version2009
Ca ≫ Anti-virus Gateway Version7.1
Ca ≫ Anti-virus Plus Version2009
Ca ≫ Arcserve Backup Versionr11.5
Ca ≫ Common Services Version3.1
Ca ≫ Etrust Anti-virus Gateway Version7.1
Ca ≫ Etrust Ez Antivirus Versionr7.1
Ca ≫ Etrust Intrusion Detection Version2.0 Updatesp1
Ca ≫ Etrust Intrusion Detection Version3.0 Updatesp1
Ca ≫ Gateway Security Versionr8.1
Ca ≫ Protection Suites Versionr2
Ca ≫ Protection Suites Versionr3
Ca ≫ Protection Suites Versionr3.1
Ca ≫ Threat Manager Version8.1 Editionenterprise
Ca ≫ Threat Manager Versionr8 Editionenterprise
Ca ≫ Arcserve Backup Versionr11.1
   Linux ≫ Linux Kernel Version-
Ca ≫ Arcserve Backup Versionr11.5
   Linux ≫ Linux Kernel Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.22% 0.914
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
http://www.securityfocus.com/bid/36653
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022999
Third Party Advisory
VDB Entry