PT-2007-5106 · Ca · Ca Anti-Virus

Published 2007-07-26 · Updated 2021-04-14 · CVE-2007-3875

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: CA Anti-Virus (formerly eTrust Antivirus) versions prior to 7.3.0.9

Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and loss of antivirus functionality. This is achieved by exploiting an invalid "previous listing chunk number" field in a CHM file.

Recommendations: For CA Anti-Virus (formerly eTrust Antivirus) versions prior to 7.3.0.9, update to version 7.3.0.9 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-3875

Affected Products

Ca Anti-Virus

References · 12

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=567 · Patch
• http://supportconnectw.ca.com/public/antivirus/infodocs/caprodarclib-secnot.asp · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-3875 · Security Note
• http://secunia.com/advisories/26155 · Vendor Advisory
• http://securityfocus.com/bid/25049 · Patch
• http://securityfocus.com/archive/1/474605/100/100/threaded · Note
• http://securityfocus.com/archive/1/474601/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35573 · Note
• http://securityfocus.com/archive/1/474683/100/0/threaded · Note
• http://ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149847 · Note
• http://securitytracker.com/id?1018450 · Note
• http://vupen.com/english/advisories/2007/2639 · Note