{"id":"CVE-2009-3587","aliases":["EUVD-2009-3568","GHSA-q64c-hf5x-986j"],"status":"published","title":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for...","description":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.07605,"percentile":0.9459,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2009-10-13T10:00:00Z","modified":"2026-06-16T23:11:57Z","products":[{"vendor":"broadcom","product":"anti-virus"},{"vendor":"broadcom","product":"anti-virus_for_the_enterprise"},{"vendor":"broadcom","product":"anti-virus_sdk"},{"vendor":"broadcom","product":"common_services"},{"vendor":"broadcom","product":"etrust_antivirus"},{"vendor":"broadcom","product":"etrust_integrated_threat_management"},{"vendor":"broadcom","product":"etrust_intrusion_detection"},{"vendor":"broadcom","product":"etrust_secure_content_manager"},{"vendor":"broadcom","product":"internet_security_suite"},{"vendor":"broadcom","product":"network_and_systems_management"},{"vendor":"broadcom","product":"secure_content_manager"},{"vendor":"broadcom","product":"unicenter_network_and_systems_management"},{"vendor":"ca","product":"anti-virus"},{"vendor":"ca","product":"anti-virus_for_the_enterprise"},{"vendor":"ca","product":"anti-virus_gateway"},{"vendor":"ca","product":"anti-virus_plus"},{"vendor":"ca","product":"arcserve_backup"},{"vendor":"ca","product":"arcserve_for_windows_client_agent"},{"vendor":"ca","product":"arcserve_for_windows_server_component"},{"vendor":"ca","product":"common_services"},{"vendor":"ca","product":"etrust_anti-virus_gateway"},{"vendor":"ca","product":"etrust_anti-virus_sdk"},{"vendor":"ca","product":"etrust_ez_antivirus"},{"vendor":"ca","product":"etrust_intrusion_detection"},{"vendor":"ca","product":"etrust_secure_content_manager"},{"vendor":"ca","product":"gateway_security"},{"vendor":"ca","product":"internet_security_suite_2008"},{"vendor":"ca","product":"internet_security_suite_plus_2008"},{"vendor":"ca","product":"internet_security_suite_plus_2009"},{"vendor":"ca","product":"protection_suites"},{"vendor":"ca","product":"threat_manager"},{"vendor":"ca","product":"threat_manager_total_defense"}],"references":[{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58691","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/36976","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1022999","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2852","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53697","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507068/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36653","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3587"},{"url":"https://github.com/advisories/GHSA-q64c-hf5x-986j"}],"sources":{"cve":[{"id":"CVE-2009-3587","description":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.","status":"published","published":"2009-10-13T10:00:00Z","modified":"2024-08-07T06:31:10.544Z","updated_at":"2026-11-02T14:33:23.749891Z"}],"euvd":[{"id":"EUVD-2009-3568","description":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.","status":"published","published":"2009-10-13T10:00:00Z","modified":"2024-08-07T06:31:10Z","updated_at":"2026-11-03T01:39:13.262818Z"}],"ghsa":[{"id":"GHSA-q64c-hf5x-986j","title":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for...","description":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.","status":"published","published":"2022-05-02T03:46:46Z","modified":"2023-01-31T05:08:48Z","updated_at":"2026-11-02T14:49:27.588283Z"}],"nvd":[{"id":"CVE-2009-3587","description":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.","status":"published","published":"2009-10-13T10:30:00.61Z","modified":"2026-06-16T23:11:57.47Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:37.004244Z"}]}}