Description
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.
References
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878
- 58691 vdb-entry
- 36976 third-party-advisory
- 1022999 vdb-entry
- ADV-2009-2852 vdb-entry
- ca-rar-code-execution(53697) vdb-entry
- 20091009 CA20091008-01: Security Notice for CA Anti-Virus Engine mailing-list
- 36653 vdb-entry