CVE-2009-3588
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for...
CVE-2009-3588 is a medium vulnerability (CVSS 4.3) in Broadcom Anti-virus, published October 13, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.39%, the 84th percentile. No source names a fixed version.
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.
- Record
CVE-2009-3588- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.
- Record
CVE-2009-3588- Updated
- 2026-11-02
EUVDEUVD-2009-3569 No score
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.
- Record
EUVD-2009-3569- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xhpm-r2g2-c7vg No score
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for...
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.
- Record
GHSA-xhpm-r2g2-c7vg- Updated
- 2026-11-02
Affected products
- broadcom anti-virus
- broadcom anti-virus for the enterprise
- broadcom etrust antivirus
- broadcom internet security suite
- broadcom anti-virus sdk
- broadcom arcserve backup
- broadcom common services
- broadcom etrust integrated threat management
- broadcom etrust intrusion detection
- broadcom etrust secure content manager
- broadcom network and systems management
- broadcom secure content manager
Show 21 moreShow less
- broadcom unicenter network and systems management
- ca anti-virus
- ca anti-virus for the enterprise
- ca etrust ez antivirus
- ca anti-virus gateway
- ca anti-virus plus
- ca arcserve backup
- ca arcserve for windows client agent
- ca arcserve for windows server component
- ca common services
- ca etrust anti-virus gateway
- ca etrust anti-virus sdk
- ca etrust intrusion detection
- ca etrust secure content manager
- ca gateway security
- ca internet security suite 2008
- ca internet security suite plus 2008
- ca internet security suite plus 2009
- ca protection suites
- ca threat manager
- ca threat manager total defense
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
exchange.xforce.ibmcloud.com/vulnerabilities/53698
support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878
secunia.com/advisories/36976
securitytracker.com/id?1022999
vupen.com/english/advisories/2009/2852
securityfocus.com/archive/1/507068/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2009-3588
github.com/advisories/GHSA-xhpm-r2g2-c7vg