CVE-2007-3875

arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=567	Patch
http://supportconnectw.ca.com/public/antivirus/infodocs/caprodarclib-secnot.asp	Patch
http://www.securityfocus.com/bid/25049	Patch
http://secunia.com/advisories/26155	Patch Vendor Advisory
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149847
http://www.securitytracker.com/id?1018450
http://www.vupen.com/english/advisories/2007/2639
https://exchange.xforce.ibmcloud.com/vulnerabilities/35573
http://www.securityfocus.com/archive/1/474683/100/0/threaded
http://www.securityfocus.com/archive/1/474605/100/100/threaded
http://www.securityfocus.com/archive/1/474601/100/0/threaded

Configuration 1

cpe:2.3:a:ca:protection_suites:r3:*:*:*:*:*:*:* cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:* cpe:2.3:a:ca:brightstor_arcserve_backup:11:*:windows:*:*:*:*:* cpe:2.3:a:ca:protection_suites:r2:*:*:*:*:*:*:* cpe:2.3:a:broadcom:anti-spyware:2007:*:*:*:*:*:*:* cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:*:*:*:*:*:*:*:* cpe:2.3:a:broadcom:antivirus_sdk:*:*:*:*:*:*:*:* cpe:2.3:a:broadcom:anti_virus_sdk:*:*:*:*:*:*:*:* cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.0:*:*:*:*:*:*:* cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:8:*:*:*:*:*:*:* cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:8.1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:antispyware_for_the_enterprise:8.1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:antispyware_for_the_enterprise:8:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_arcserve_client:*:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brigthstor_arcserve_client_for_windows:*:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:* cpe:2.3:a:broadcom:common_services:11:*:*:*:*:*:*:* cpe:2.3:a:broadcom:common_services:11.1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:etrust_antivirus:8:*:*:*:*:*:*:* cpe:2.3:a:broadcom:etrust_antivirus_gateway:7.1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:etrust_ez_antivirus:6.1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:etrust_ez_antivirus:7:*:*:*:*:*:*:* cpe:2.3:a:broadcom:etrust_ez_armor:1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:etrust_ez_armor:2:*:*:*:*:*:*:* cpe:2.3:a:broadcom:etrust_ez_armor:3:*:*:*:*:*:*:* cpe:2.3:a:broadcom:etrust_internet_security_suite:1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:etrust_internet_security_suite:2:*:*:*:*:*:*:* cpe:2.3:a:broadcom:etrust_intrusion_detection:2.0:*:*:*:*:*:*:* cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:* cpe:2.3:a:broadcom:internet_security_suite:3.0:*:*:*:*:*:*:* cpe:2.3:a:broadcom:secure_content_manager:1.1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:secure_content_manager:8.0:*:*:*:*:*:*:* cpe:2.3:a:broadcom:threat_manager:8:*:*:*:*:*:*:* cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:* cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11:*:*:*:*:*:*:* cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11.1:*:*:*:*:*:*:*

---

Published : 2007-07-26 12:30

Updated : 2021-04-14 03:34

---

NVD link : CVE-2007-3875

Mitre link : CVE-2007-3875

No products.

NVD-CWE-Other