Test ID:	1.3.6.1.4.1.25623.1.0.900967
Category:	Denial of Service
Title:	CA Multiple Products 'arclib' Component DoS Vulnerability - Windows
Summary:	CA Multiple Products is prone to a denial of service (DoS) vulnerability.
Description:	Summary: CA Multiple Products is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Multiple errors occur in the arclib component of the CA Anti-Virus engine due to improper handling of RAR files. Vulnerability Impact: Remote attackers can exploit this issue to execute arbitrary code and crash the service on affected systems via specially crafted RAR files. Affected Software/OS: eTrust EZ Antivirus 7.1 CA Anti-Virus 2007 through 2008 CA Internet Security Suite 2007 through Plus 2009 Solution: Apply the appropriate patches from the referenced advisory. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3587 BugTraq ID: 36653 http://www.securityfocus.com/bid/36653 Bugtraq: 20091009 CA20091008-01: Security Notice for CA Anti-Virus Engine (Google Search) http://www.securityfocus.com/archive/1/507068/100/0/threaded http://osvdb.org/58691 http://www.securitytracker.com/id?1022999 http://secunia.com/advisories/36976 http://www.vupen.com/english/advisories/2009/2852 XForce ISS Database: ca-rar-code-execution(53697) https://exchange.xforce.ibmcloud.com/vulnerabilities/53697 Common Vulnerability Exposure (CVE) ID: CVE-2009-3588 XForce ISS Database: ca-rar-dos(53698) https://exchange.xforce.ibmcloud.com/vulnerabilities/53698
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.