PT-2009-2750 · Ca · Ca Internet Security Suite 2007+3

Published

2009-01-27

·

Updated

2021-04-09

·

CVE-2009-0042

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions CA Anti-Virus for the Enterprise versions 7.1, r8, and r8.1 CA Anti-Virus 2007 version 8 and 2008 CA Internet Security Suite 2007 version 3 and 2008 CA products using the Arclib library before version 7.3.0.15
Description The issue allows remote attackers to bypass virus detection via a malformed archive file. This is due to multiple unspecified vulnerabilities in the Arclib library.
Recommendations For CA Anti-Virus for the Enterprise versions 7.1, r8, and r8.1, update the Arclib library to version 7.3.0.15 or later. For CA Anti-Virus 2007 version 8 and 2008, update the Arclib library to version 7.3.0.15 or later. For CA Internet Security Suite 2007 version 3 and 2008, update the Arclib library to version 7.3.0.15 or later. For other CA products using the Arclib library, update the library to version 7.3.0.15 or later.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2009-0042

Affected Products

Arclib Library
Ca Anti-Virus 2007
Ca Anti-Virus For The Enterprise
Ca Internet Security Suite 2007