Unscored severity · published Oct 13, 2009
CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVSS
7.6%
EPSS
No
On KEV
Description
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.6% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Anti-virus · Broadcom
2007; 2008 · source: NVD
AF
Anti-virus For The Enterprise · CA
r8.1 · source: NVD
AG
Anti-virus Gateway · CA
7.1 · source: NVD
AP
Anti-virus Plus · CA
2009 · source: NVD
AS
Anti-virus Sdk · Broadcom
All versions, or not specified · source: NVD
AB
Arcserve Backup · CA
r11.5; r11.1; r11.5 · source: NVD
AF
Arcserve For Windows Client Agent · CA
All versions, or not specified · source: NVD
AF
Arcserve For Windows Server Component · CA
All versions, or not specified · source: NVD
CS
Common Services · Broadcom
11; 11.1 · source: NVD
EA
Etrust Anti-virus Gateway · CA
7.1 · source: NVD
EA
Etrust Anti-virus Sdk · CA
All versions, or not specified · source: NVD
EA
Etrust Antivirus · Broadcom
7.1; 8; 8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3587
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3587
Broken Link
http://osvdb.org/58691
Third Party Advisory
http://secunia.com/advisories/36976
Broken Link
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878
Third Party Advisory
http://www.securityfocus.com/archive/1/507068/100/0/threaded
Third Party Advisory
http://www.securityfocus.com/bid/36653
Third Party Advisory
http://www.securitytracker.com/id?1022999
More from Anti-virus
–
CVE-2009-3588
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-0042
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1;…