{"id":"CVE-2009-3588","aliases":["EUVD-2009-3569","GHSA-xhpm-r2g2-c7vg"],"status":"published","title":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for...","description":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02394,"percentile":0.84119,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2009-10-13T10:00:00Z","modified":"2026-06-16T23:11:57Z","products":[{"vendor":"broadcom","product":"anti-virus"},{"vendor":"broadcom","product":"anti-virus_for_the_enterprise"},{"vendor":"broadcom","product":"anti-virus_sdk"},{"vendor":"broadcom","product":"arcserve_backup"},{"vendor":"broadcom","product":"common_services"},{"vendor":"broadcom","product":"etrust_antivirus"},{"vendor":"broadcom","product":"etrust_integrated_threat_management"},{"vendor":"broadcom","product":"etrust_intrusion_detection"},{"vendor":"broadcom","product":"etrust_secure_content_manager"},{"vendor":"broadcom","product":"internet_security_suite"},{"vendor":"broadcom","product":"network_and_systems_management"},{"vendor":"broadcom","product":"secure_content_manager"},{"vendor":"broadcom","product":"unicenter_network_and_systems_management"},{"vendor":"ca","product":"anti-virus"},{"vendor":"ca","product":"anti-virus_for_the_enterprise"},{"vendor":"ca","product":"anti-virus_gateway"},{"vendor":"ca","product":"anti-virus_plus"},{"vendor":"ca","product":"arcserve_backup"},{"vendor":"ca","product":"arcserve_for_windows_client_agent"},{"vendor":"ca","product":"arcserve_for_windows_server_component"},{"vendor":"ca","product":"common_services"},{"vendor":"ca","product":"etrust_anti-virus_gateway"},{"vendor":"ca","product":"etrust_anti-virus_sdk"},{"vendor":"ca","product":"etrust_ez_antivirus"},{"vendor":"ca","product":"etrust_intrusion_detection"},{"vendor":"ca","product":"etrust_secure_content_manager"},{"vendor":"ca","product":"gateway_security"},{"vendor":"ca","product":"internet_security_suite_2008"},{"vendor":"ca","product":"internet_security_suite_plus_2008"},{"vendor":"ca","product":"internet_security_suite_plus_2009"},{"vendor":"ca","product":"protection_suites"},{"vendor":"ca","product":"threat_manager"},{"vendor":"ca","product":"threat_manager_total_defense"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53698","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry"]},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36976","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022999","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2852","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507068/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36653","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3588"},{"url":"https://github.com/advisories/GHSA-xhpm-r2g2-c7vg"}],"sources":{"cve":[{"id":"CVE-2009-3588","description":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.","status":"published","published":"2009-10-13T10:00:00Z","modified":"2024-08-07T06:31:10.558Z","updated_at":"2026-11-02T14:33:23.749891Z"}],"euvd":[{"id":"EUVD-2009-3569","description":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.","status":"published","published":"2009-10-13T10:00:00Z","modified":"2024-08-07T06:31:10Z","updated_at":"2026-11-03T01:39:13.262818Z"}],"ghsa":[{"id":"GHSA-xhpm-r2g2-c7vg","title":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for...","description":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.","status":"published","published":"2022-05-02T03:46:46Z","modified":"2023-01-31T05:07:57Z","updated_at":"2026-11-02T14:49:18.423365Z"}],"nvd":[{"id":"CVE-2009-3588","description":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.","status":"published","published":"2009-10-13T10:30:00.627Z","modified":"2026-06-16T23:11:57.63Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:37.004244Z"}]}}