CVE-2005-1693

Critical

Description

Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup (BAB) r11.1, Vet Antivirus, Zonelabs ZoneAlarm Security Suite, and ZoneAlarm Antivirus, allows remote attackers to gain privileges via a compressed VBA directory with a project name length of -1, which leads to a heap-based buffer overflow.

SeverityCritical
CVSS10.0
Exploit probability—
ProductBroadcom Etrust Antivirus
PublishedMay 24, 2005
First seenMay 24, 2005

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
broadcom etrust_antivirus6.0, 7.0, 7.1—
broadcom etrust_antivirus_ee6.0, 7.0—
broadcom etrust_ez_armor1.0, 2.0, 2.3, 2.4, 2.4.4—
broadcom etrust_ez_armor_le2.0, 3.0.0.14—
broadcom etrust_intrusion_detection1.4.1.13, 1.4.5, 1.5, 3.0—
broadcom etrust_secure_content_manager1.0, 1.1—
broadcom inoculateit6.0—
ca brightstor_arcserve_backup11.1—
ca etrust_antivirus7.0, 7.0_sp2, 7.1—
ca etrust_intrusion_detection3.0—
ca etrust_secure_content_manager1.0—
ca vet_antivirus10.66—
zonelabs zonealarmNo range specified—
zonelabs zonealarm_antivirusNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.