CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.
- EPSS
- 7.6% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- broadcom:anti-virus
- broadcom:anti-virus_for_the_enterprise
- broadcom:anti-virus_sdk
- broadcom:common_services
- broadcom:etrust_antivirus
- broadcom:etrust_integrated_threat_management
- broadcom:etrust_intrusion_detection
- broadcom:etrust_secure_content_manager
- broadcom:internet_security_suite
- broadcom:network_and_systems_management
- broadcom:secure_content_manager
- broadcom:unicenter_network_and_systems_management
- ca:anti-virus
- ca:anti-virus_for_the_enterprise
- ca:anti-virus_gateway
- ca:anti-virus_plus
- ca:arcserve_backup
- ca:arcserve_for_windows_client_agent
- ca:arcserve_for_windows_server_component
- ca:common_services
- ca:etrust_anti-virus_gateway
- ca:etrust_anti-virus_sdk
- ca:etrust_ez_antivirus
- ca:etrust_intrusion_detection
- ca:etrust_secure_content_manager
- ca:gateway_security
- ca:internet_security_suite_2008
- ca:internet_security_suite_plus_2008
- ca:internet_security_suite_plus_2009
- ca:protection_suites
- ca:threat_manager
- ca:threat_manager_total_defense