NVD

Id
50786  
Name
CVE-2009-3587  
Description
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-10-13  
Modified Date
2009-11-09  
Seq
2009-3587  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
256898 50786 CVE-2009-3587 http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878  View
256899 50786 CVE-2009-3587 20091009 CA20091008-01: Security Notice for CA Anti-Virus Engine  View
256900 50786 CVE-2009-3587 36653  View
256901 50786 CVE-2009-3587 1022999  View
256902 50786 CVE-2009-3587 ADV-2009-2852  View
256903 50786 CVE-2009-3587 ca-rar-code-execution(53697)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41621 JVNDB-2009-002628 複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントにおける任意のコードを実行される脆弱性 複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントには、RAR アーカイブファイルに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-3587 41018 CVE-2009-3587 50786 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002628.html 2009-10-08 2010-12-27 View