CVE-2007-3875

Medium

Description

arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.

SeverityMedium
CVSS4.3
Exploit probability—
ProductBroadcom Anti-virus For The Enterprise
PublishedJul 26, 2007
First seenJul 26, 2007

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
broadcom anti-virus_for_the_enterprisev ≤ 8, 7.0, 7.1, 8, 8.1—
broadcom anti-spyware2007—
broadcom anti_virus_sdkNo range specified—
broadcom antispyware_for_the_enterprise8, 8.1—
broadcom antivirus_sdkNo range specified—
broadcom brightstor_arcserve_backup9.01, 11.1, 11.5—
broadcom brightstor_arcserve_clientNo range specified—
broadcom brightstor_enterprise_backup10.5—
broadcom brigthstor_arcserve_client_for_windowsNo range specified—
broadcom common_services11, 11.1—
broadcom etrust_antivirus8—
broadcom etrust_antivirus_gateway7.1—
broadcom etrust_ez_antivirus6.1, 7—
broadcom etrust_ez_armor1, 2, 3—
broadcom etrust_internet_security_suite1, 2—
broadcom etrust_intrusion_detection2.0, 3.0—
broadcom internet_security_suite3.0—
broadcom secure_content_manager1.1, 8.0—
broadcom threat_manager8—
broadcom unicenter_network_and_systems_management3.0, 3.1, 11, 11.1—
ca brightstor_arcserve_backup11—
ca etrust_intrusion_detection3.0—
ca protection_suitesr2, r3—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.