Description
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.
References
- 1018450 vdb-entry
- http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149847
- 20070724 Computer Associates AntiVirus CHM File Handling DoS Vulnerability third-party-advisory
- 20070725 n.runs-SA-2007.024 - CA eTrust Antivirus Infinite Loop DoS (remote) Advisory mailing-list
- ADV-2007-2639 vdb-entry
- 20070725 [CAID 35525, 35526]: CA Products Arclib Library Denial of Service Vulnerabilities mailing-list
- ca-arclib-chm-dos(35573) vdb-entry
- 20070726 RE: [CAID 35525, 35526]: CA Products Arclib Library Denial of Service Vulnerabilities mailing-list
- http://supportconnectw.ca.com/public/antivirus/infodocs/caprodarclib-secnot.asp
- 25049 vdb-entry
- 26155 third-party-advisory