CVE-2007-3875

Home/CVE/arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote att

CVE

arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote att

arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.

MEDIUM · CVSS 4.3 EPSS 0.03323

Monitor

No active-exploitation, high-EPSS, or public-exploit signals - routine patching cadence

Sigma rules0 YARA rules0

▤

Affected Products & Versions

broadcom anti-spywareall versions
broadcom anti-virus for the enterprise<= 8
broadcom anti-virus for the enterpriseall versions
broadcom anti virus sdkall versions
broadcom antispyware for the enterpriseall versions
broadcom antivirus sdkall versions
broadcom brightstor arcserve backupall versions
broadcom brightstor arcserve clientall versions
Show all 24 affected productsbroadcom brightstor enterprise backupall versions
broadcom brigthstor arcserve client for windowsall versions
broadcom common servicesall versions
broadcom etrust antivirusall versions
broadcom etrust antivirus gatewayall versions
broadcom etrust ez antivirusall versions
broadcom etrust ez armorall versions
broadcom etrust internet security suiteall versions
broadcom etrust intrusion detectionall versions
broadcom internet security suiteall versions
broadcom secure content managerall versions
broadcom threat managerall versions
broadcom unicenter network and systems managementall versions
ca brightstor arcserve backupall versions
ca etrust intrusion detectionall versions
ca protection suitesall versions

▣

Scoring & Timeline

4.3

MEDIUM · CVSS v2 (legacy) · cve@mitre.org

View on NVD

This CVE predates CVSS v3; the legacy v2 score is shown so triage still has a severity to work with.

v2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Published to NVD26 Jul 2007 · 12:30 AM

🔗

References & Sources

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=567Patch

http://secunia.com/advisories/26155PatchVendor Advisory

http://supportconnectw.ca.com/public/antivirus/infodocs/caprodarclib-secnot.aspPatch

http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149847

http://www.securityfocus.com/archive/1/474601/100/0/threaded

http://www.securityfocus.com/archive/1/474605/100/100/threaded

Show all 11 references

http://www.securityfocus.com/archive/1/474683/100/0/threaded

http://www.securityfocus.com/bid/25049Patch

http://www.securitytracker.com/id?1018450

http://www.vupen.com/english/advisories/2007/2639

https://exchange.xforce.ibmcloud.com/vulnerabilities/35573

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin