Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

CA Anti-Virus products can be crashed by malicious RAR file

CVE-2009-3588 · published 17 years ago
Summary

Versions of CA Anti‑Virus for the Enterprise, Anti‑Virus 2007‑2009, eTrust EZ Antivirus, and Internet Security Suite are vulnerable to specially crafted RAR archives that corrupt memory and stop the program from working. This results in a denial of service, meaning the antivirus may stop scanning or protect the system. Apply the latest patches from the vendor or upgrade to a newer, supported version to prevent the crash.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
broadcom anti-virus 2007
2008
cpe:2.3:a:broadcom:anti-virus:2007:8:*:*:*:*:*:*
broadcom anti-virus_for_the_enterprise 7.1
r8
cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.1:*:*:*:*:*:*:*
broadcom anti-virus_sdk All versions
cpe:2.3:a:broadcom:anti-virus_sdk:*:*:*:*:*:*:*:*
broadcom common_services 11
11.1
cpe:2.3:a:broadcom:common_services:11:*:*:*:*:*:*:*
broadcom etrust_antivirus 7.1
8
8.1
cpe:2.3:a:broadcom:etrust_antivirus:7.1:*:*:*:*:*:*:*
broadcom etrust_integrated_threat_management 8.1
cpe:2.3:a:broadcom:etrust_integrated_threat_management:8.1:*:*:*:*:*:*:*
broadcom etrust_intrusion_detection 3.0
cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*
broadcom etrust_secure_content_manager 1.1
cpe:2.3:a:broadcom:etrust_secure_content_manager:1.1:*:*:*:*:*:*:*
broadcom internet_security_suite 3.0
cpe:2.3:a:broadcom:internet_security_suite:*:*:*:*:*:*:*:*
broadcom network_and_systems_management r3.0
r3.1
r11
r11.1
cpe:2.3:a:broadcom:network_and_systems_management:r3.0:*:*:*:*:*:*:*
broadcom secure_content_manager 1.1
8.0
cpe:2.3:a:broadcom:secure_content_manager:1.1:*:*:*:*:*:*:*
broadcom unicenter_network_and_systems_management 3.0
3.1
11
11.1
cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*
ca anti-virus 2009
cpe:2.3:a:ca:anti-virus:2009:*:*:*:*:*:*:*
ca anti-virus_for_the_enterprise r8.1
cpe:2.3:a:ca:anti-virus_for_the_enterprise:r8.1:*:*:*:*:*:*:*
ca anti-virus_gateway 7.1
cpe:2.3:a:ca:anti-virus_gateway:7.1:*:*:*:*:*:*:*
ca anti-virus_plus 2009
cpe:2.3:a:ca:anti-virus_plus:2009:*:*:*:*:*:*:*
ca arcserve_for_windows_client_agent All versions
cpe:2.3:a:ca:arcserve_for_windows_client_agent:*:*:*:*:*:*:*:*
ca arcserve_for_windows_server_component All versions
cpe:2.3:a:ca:arcserve_for_windows_server_component:*:*:*:*:*:*:*:*
ca common_services 3.1
cpe:2.3:a:ca:common_services:3.1:*:*:*:*:*:*:*
ca etrust_anti-virus_gateway 7.1
cpe:2.3:a:ca:etrust_anti-virus_gateway:7.1:*:*:*:*:*:*:*
ca etrust_anti-virus_sdk All versions
cpe:2.3:a:ca:etrust_anti-virus_sdk:*:*:*:*:*:*:*:*
ca etrust_ez_antivirus r7.1
cpe:2.3:a:ca:etrust_ez_antivirus:r7.1:*:*:*:*:*:*:*
ca etrust_intrusion_detection 2.0
3.0
cpe:2.3:a:ca:etrust_intrusion_detection:2.0:sp1:*:*:*:*:*:*
ca etrust_secure_content_manager 8.0
cpe:2.3:a:ca:etrust_secure_content_manager:8.0:*:*:*:*:*:*:*
ca gateway_security r8.1
cpe:2.3:a:ca:gateway_security:r8.1:*:*:*:*:*:*:*
ca internet_security_suite_2008 All versions
cpe:2.3:a:ca:internet_security_suite_2008:*:*:*:*:*:*:*:*
ca internet_security_suite_plus_2008 All versions
cpe:2.3:a:ca:internet_security_suite_plus_2008:*:*:*:*:*:*:*:*
ca internet_security_suite_plus_2009 All versions
cpe:2.3:a:ca:internet_security_suite_plus_2009:*:*:*:*:*:*:*:*
ca protection_suites r2
r3
r3.1
cpe:2.3:a:ca:protection_suites:r2:*:*:*:*:*:*:*
ca threat_manager 8.1
r8
cpe:2.3:a:ca:threat_manager:8.1:*:enterprise:*:*:*:*:*
ca threat_manager_total_defense All versions
cpe:2.3:a:ca:threat_manager_total_defense:*:*:*:*:*:*:*:*
broadcom arcserve_backup r12.0
cpe:2.3:a:broadcom:arcserve_backup:r12.0:sp1:*:*:*:*:*:*
ca arcserve_backup r11.5
r11.1
cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrus...
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.3 Medium
Exploitation
2% chance of attack within 30 days
Timeline
Published13 Oct 2009
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2009-3588 · NVD
Track software like this
Free during beta