Computer Associates Anti-Virus Engine 'arclib' Multiple Memory Corruption Vulnerabilities
BID:36653
Info
Computer Associates Anti-Virus Engine 'arclib' Multiple Memory Corruption Vulnerabilities
| Bugtraq ID: | 36653 |
| Class: | Unknown |
| CVE: |
CVE-2009-3587 CVE-2009-3588 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 09 2009 12:00AM |
| Updated: | Oct 13 2009 03:38PM |
| Credit: | Thierry Zoller |
| Vulnerable: |
Computer Associates Unicenter Network and Systems Management 3.1 Computer Associates Unicenter Network and Systems Management 3.0 Computer Associates Unicenter Network and Systems Management 11.1 Computer Associates Unicenter Network and Systems Management 11 Computer Associates Threat Manager Total Defense 0 Computer Associates Threat Manager for the Enterprise r8.1 Computer Associates Threat Manager for the Enterprise r8 Computer Associates Protection Suites r2 0 Computer Associates Protection Suites r3 Computer Associates Protection Suites 3.1 Computer Associates Internet Security Suite 2009 Plus 0 Computer Associates Internet Security Suite 2008 Plus 0 Computer Associates Internet Security Suite 2008 0 Computer Associates Internet Security Suite 2007 3.0 Computer Associates Gateway Security 8.1 Computer Associates eTrust Secure Content Manager 8.0 Computer Associates eTrust Secure Content Manager 1.1 Computer Associates eTrust Intrusion Detection 3.0 SP 1 Computer Associates eTrust Intrusion Detection 3.0 Computer Associates eTrust Intrusion Detection 2.0.0 SP1 Computer Associates eTrust EZ Antivirus 7.1 Computer Associates Common Services r11.1 Computer Associates Common Services r11 Computer Associates Common Services 3.1 Computer Associates BrightStor ARCserve Backup for Windows (Client) 11.1 Computer Associates BrightStor ARCServe Backup for Windows 11.5 Computer Associates BrightStor ARCServe Backup for Windows 12.5 Computer Associates BrightStor ARCServe Backup for Windows 12.0 Computer Associates BrightStor ARCServe Backup r12.0 Windows SP1 Computer Associates ARCserve Backup for Linux 11.5 SP3 Computer Associates ARCserve Backup for Linux 11.5 SP2 Computer Associates ARCserve Backup for Linux 11.5 SP1 Computer Associates ARCserve Backup for Linux 11.5 GA Computer Associates ARCserve Backup for Linux 11.1 SP3 Computer Associates ARCserve Backup for Linux 11.1 SP2 Computer Associates ARCserve Backup for Linux 11.1 SP1 Computer Associates ARCserve Backup for Linux 11.1 GA Computer Associates Anti-Virus SDK 0 Computer Associates Anti-Virus Gateway 7.1 Computer Associates Anti-Virus for the Enterprise r8.1 Computer Associates Anti-Virus for the Enterprise r8 Computer Associates Anti-Virus for the Enterprise 7.1 Computer Associates Anti-Virus 2009 Plus 0 Computer Associates Anti-Virus 2009 0 Computer Associates Anti-Virus 2007 8 Computer Associates Anti-Virus 2008 |
| Not Vulnerable: | |
Discussion
Computer Associates Anti-Virus Engine 'arclib' Multiple Memory Corruption Vulnerabilities
Multiple Computer Associates products are prone to memory-corruption vulnerabilities that affect the Anti-Virus engine.
An attacker can exploit these issues to execute arbitrary code in the context of the affected applications or cause denial-of-service conditions.
The issues affect the Anti-Virus engine with versions prior to 'arclib' 8.1.4.0.
Multiple Computer Associates products are prone to memory-corruption vulnerabilities that affect the Anti-Virus engine.
An attacker can exploit these issues to execute arbitrary code in the context of the affected applications or cause denial-of-service conditions.
The issues affect the Anti-Virus engine with versions prior to 'arclib' 8.1.4.0.
Exploit / POC
Computer Associates Anti-Virus Engine 'arclib' Multiple Memory Corruption Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Computer Associates Anti-Virus Engine 'arclib' Multiple Memory Corruption Vulnerabilities
Solution:
The vendor has released an advisory and updates. Please see the references for details.
Solution:
The vendor has released an advisory and updates. Please see the references for details.
References
Computer Associates Anti-Virus Engine 'arclib' Multiple Memory Corruption Vulnerabilities
References:
References:
- Advisory : Computer Associates multiple products - arbritary remote code executi (G-SEC)
- CA20091008-01: Security Notice for CA Anti-Virus Engine (Computer Associates)
- Computer Associates Homepage (Computer Associates)
- [G-SEC 46-2009] Computer Associates multiple products arbritary code execution (Thierry Zoller
- CA20091008-01: Security Notice for CA Anti-Virus Engine ("Williams, James K"