PT-2009-5870 · Ca · Ca Anti-Virus+3

Published 2009-10-13 · Updated 2024-05-17 · CVE-2009-3588

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions CA Anti-Virus for the Enterprise versions 7.1 through r8.1 CA Anti-Virus 2007 through 2009 CA eTrust EZ Antivirus version r7.1 CA Internet Security Suite 2007 through Plus 2009

Description The issue is related to a crafted RAR archive file that triggers stack corruption, leading to a denial of service. This can be caused by remote attackers.

Recommendations For CA Anti-Virus for the Enterprise versions 7.1 through r8.1, consider updating to a version that is not affected by this issue. For CA Anti-Virus 2007 through 2009, update to a newer version to resolve the issue. For CA eTrust EZ Antivirus version r7.1, update to a version that is not vulnerable. For CA Internet Security Suite 2007 through Plus 2009, update to a version that does not contain the vulnerable component.

Fix

Related Identifiers

CVE-2009-3588

Affected Products

Ca Anti-Virus

Ca Anti-Virus For The Enterprise

Ca Internet Security Suite

Ca Etrust Vet Antivirus

References · 12

• http://vupen.com/english/advisories/2009/2852 · Vendor Advisory
• http://secunia.com/advisories/36976 · Vendor Advisory
• http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3588 · Security Note
• http://securityfocus.com/archive/1/507068/100/0/threaded · Note
• https://t.me/cvenotify/13004 · Telegram Post
• https://t.me/cvenotify/80287 · Telegram Post
• https://t.me/cvenotify/80288 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53698 · Note
• http://securityfocus.com/bid/36653 · Note
• http://securitytracker.com/id?1022999 · Note
• https://t.me/cvenotify/13003 · Telegram Post