What’s Vulnerable › Vulnerabilities
CVE-2009-3588
- Severity: medium (CVSS 4.3 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2009-10-13 · updated 2026-06-16
Description
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.
Affected products
- Broadcom Anti-Virus: 2007-8, 2008
- Broadcom Anti-Virus For The Enterprise: 7.1, r8
- Broadcom Anti-Virus Sdk: all versions
- Broadcom Arcserve Backup: r12.0-sp1, r12.0-sp2
- Broadcom Common Services: 11, 11.1
- Broadcom Etrust Antivirus: 7.1, 8, 8.1
- Broadcom Etrust Integrated Threat Management: 8.1
- Broadcom Etrust Intrusion Detection: 3.0
- Broadcom Etrust Secure Content Manager: 1.1
- Broadcom Internet Security Suite: 3.0
- Broadcom Network And Systems Management: r3.0, r3.1, r11, r11.1
- Broadcom Secure Content Manager: 1.1, 8.0
- Broadcom Unicenter Network And Systems Management: 3.0, 3.1, 11, 11.1
- Ca Anti-Virus: 2009
- Ca Anti-Virus For The Enterprise: r8.1
- Ca Anti-Virus Gateway: 7.1
- Ca Anti-Virus Plus: 2009
- Ca Arcserve Backup: r11.5, r11.1
- Ca Arcserve For Windows Client Agent: all versions
- Ca Arcserve For Windows Server Component: all versions
- Ca Common Services: 3.1
- Ca Etrust Anti-Virus Gateway: 7.1
- Ca Etrust Anti-Virus Sdk: all versions
- Ca Etrust Ez Antivirus: r7.1
- Ca Etrust Intrusion Detection: 2.0-sp1, 3.0-sp1
- Ca Etrust Secure Content Manager: 8.0
- Ca Gateway Security: r8.1
- Ca Internet Security Suite 2008: all versions
- Ca Internet Security Suite Plus 2008: all versions
- Ca Internet Security Suite Plus 2009: all versions
References
- http://secunia.com/advisories/36976
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878
- http://www.securityfocus.com/archive/1/507068/100/0/threaded
- http://www.securityfocus.com/bid/36653
- http://www.securitytracker.com/id?1022999
- http://www.vupen.com/english/advisories/2009/2852
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53698
- http://secunia.com/advisories/36976
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878
- http://www.securityfocus.com/archive/1/507068/100/0/threaded
- http://www.securityfocus.com/bid/36653
- http://www.securitytracker.com/id?1022999
Get alerted when CVE-2009-3588 or the next vulnerability affects your stack