Unscored severity · published May 24, 2005
CVE-2005-1693
Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1,…
–
CVSS
6.9%
EPSS
No
On KEV
Description
Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup (BAB) r11.1, Vet Antivirus, Zonelabs ZoneAlarm Security Suite, and ZoneAlarm Antivirus, allows remote attackers to gain privileges via a compressed VBA directory with a project name length of -1, which leads to a heap-based buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.9% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Brightstor Arcserve Backup · CA
11.1 · source: NVD
EA
Etrust Antivirus · Broadcom
6.0; 7.0; 7.1 · source: NVD
EA
Etrust Antivirus EE · Broadcom
6.0; 7.0 · source: NVD
EE
Etrust EZ Armor · Broadcom
1.0; 2.0; 2.3; 2.4; 2.4.4 · source: NVD
EE
Etrust EZ Armor LE · Broadcom
2.0; 3.0.0.14 · source: NVD
EI
Etrust Intrusion Detection · Broadcom
1.4.1.13; 1.4.5; 1.5; 3.0 · source: NVD
ES
Etrust Secure Content Manager · CA
1.0 · source: NVD
IN
Inoculateit · Broadcom
6.0 · source: NVD
VA
Vet Antivirus · CA
10.66 · source: NVD
ZO
Zonealarm · Zonelabs
All versions, or not specified · source: NVD
ZA
Zonealarm Antivirus · Zonelabs
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1693
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1693
Patch
http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter=1588
marc.info
http://marc.info/?l=bugtraq&m=111686576416450&w=2
secunia.com
http://secunia.com/advisories/15470
secunia.com
http://secunia.com/advisories/15479
securitytracker.com
http://securitytracker.com/id?1014050
www.rem0te.com
http://www.rem0te.com/public/images/vet.pdf
More from Etrust Antivirus
–
CVE-2009-3588
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2007-3875
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss…
–
CVE-2007-2864
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary…
–
CVE-2006-6496
The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL…