CVE-2009-0042
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA...
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.
Exploit likelihood
What each source reports
NVD Score used
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.
- Record
CVE-2009-0042- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.
- Record
CVE-2009-0042- Updated
- 2026-11-02
EUVDEUVD-2009-0051 No score
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.
- Record
EUVD-2009-0051- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fmvc-54mp-h2w3 No score
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA...
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.
- Record
GHSA-fmvc-54mp-h2w3- Updated
- 2026-11-02
Affected products
- broadcom anti-virus
- broadcom anti-virus for the enterprise
- broadcom anti-spyware
- broadcom anti-spyware for the enterprise
- broadcom anti-virus sdk
- broadcom antivirus gateway
- broadcom arcserve client agent
- broadcom common services
- broadcom etrust ez antivirus
- broadcom etrust intrusion detection
- broadcom network and systems management
- broadcom secure content manager
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0042 is a high vulnerability (CVSS 10.0) in Broadcom Anti-virus, published January 28, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.27%, the 91st percentile. No source names a fixed version.
References
support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601
vupen.com/english/advisories/2009/0270
exchange.xforce.ibmcloud.com/vulnerabilities/48261
securityfocus.com/bid/33464
securitytracker.com/id?1021639
community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspx
nvd.nist.gov/vuln/detail/CVE-2009-0042
github.com/advisories/GHSA-fmvc-54mp-h2w3