Unscored severity · published Jul 26, 2007
CVE-2007-3875
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss…
–
CVSS
3.6%
EPSS
No
On KEV
Description
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.6% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AV
Anti Virus Sdk · Broadcom
All versions, or not specified · source: NVD
AN
Anti-spyware · Broadcom
2007 · source: NVD
AF
Anti-virus For The Enterprise · Broadcom
through 8; 7.0; 7.1; 8; 8.1 · source: NVD
AF
Antispyware For The Enterprise · Broadcom
8; 8.1 · source: NVD
AS
Antivirus Sdk · Broadcom
All versions, or not specified · source: NVD
BA
Brightstor Arcserve Backup · CA
11 · source: NVD
BA
Brightstor Arcserve Client · Broadcom
All versions, or not specified · source: NVD
BE
Brightstor Enterprise Backup · Broadcom
10.5 · source: NVD
BA
Brigthstor Arcserve Client For Windows · Broadcom
All versions, or not specified · source: NVD
CS
Common Services · Broadcom
11; 11.1 · source: NVD
EA
Etrust Antivirus · Broadcom
8 · source: NVD
EA
Etrust Antivirus Gateway · Broadcom
7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3875
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3875
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=567
Patch
http://secunia.com/advisories/26155
Patch
http://supportconnectw.ca.com/public/antivirus/infodocs/caprodarclib-secnot.asp
www.ca.com
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149847
www.securityfocus.com
http://www.securityfocus.com/archive/1/474601/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/474605/100/100/threaded
More from Anti Virus Sdk
–
CVE-2009-3588
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-0042
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1;…