CVE-2007-3875
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.
- EPSS
- 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- broadcom:anti-spyware
- broadcom:anti-virus_for_the_enterprise
- broadcom:anti_virus_sdk
- broadcom:antispyware_for_the_enterprise
- broadcom:antivirus_sdk
- broadcom:brightstor_arcserve_backup
- broadcom:brightstor_arcserve_client
- broadcom:brightstor_enterprise_backup
- broadcom:brigthstor_arcserve_client_for_windows
- broadcom:common_services
- broadcom:etrust_antivirus
- broadcom:etrust_antivirus_gateway
- broadcom:etrust_ez_antivirus
- broadcom:etrust_ez_armor
- broadcom:etrust_internet_security_suite
- broadcom:etrust_intrusion_detection
- broadcom:internet_security_suite
- broadcom:secure_content_manager
- broadcom:threat_manager
- broadcom:unicenter_network_and_systems_management
- ca:brightstor_arcserve_backup
- ca:etrust_intrusion_detection
- ca:protection_suites
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=567
- http://secunia.com/advisories/26155
- http://supportconnectw.ca.com/public/antivirus/infodocs/caprodarclib-secnot.asp
- http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149847
- http://www.securityfocus.com/archive/1/474601/100/0/threaded