CVE-2009-0042

CVE-2009-0042 affects the Arclib library (arclib.dll) used by CA Security products. The vulnerability, described across CA Anti-Virus for Enterprise (7.1, r8, r8.1), Anti-Virus 2007 v8 and 2008, Internet Security Suite 2007 v3 and 2008, and other CA products, allows remote attackers to bypass vir...

CVE-2009-3588

CVE-2009-3588 (and 3587) describe a DoS vulnerability in CA’s arclib component used by CA Anti-Virus for Enterprise and related CA products. A crafted RAR archive can trigger stack corruption (CVE-3588) and heap corruption (CVE-3587); CVE-3587 also notes possible arbitrary-code execution. Affecte...

CVE-2009-3587

CA ARclib DoS vulnerabilities (CVE-2009-3587/3588) affect CA Anti-Virus for the Enterprise and related CA products; exploitation via crafted RAR archives can trigger heap or stack corruption and may lead to denial of service and possibly arbitrary code execution. Affected products listed include ...

CVE-2004-0935

CVE-2004-0935 affects Eset Anti-Virus prior to 1.020. A ZIP archive with both local and global headers set to zero could bypass antivirus protection and allow a malicious file to be opened on the target system. PoC/proofs of concept code and advisories (e.g., iDEFENSE CAN references) document det...

CVE-2004-0936

CVE-2004-0936 refers to a ZIP header manipulation vulnerability affecting anti-virus engines (notably RAV) where both local and global ZIP headers can be set to zero, allowing a compressed file to bypass protection and still be opened. The connected sources describe a proof-of-concept and public ...

CVE-2004-0933

CVE-2004-0933 affects Computer Associates CA InoculateIT 6.0, eTrust Antivirus (r6.0–r7.1), eTrust Antivirus for the Gateway (r7.0–r7.1), eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor (2.0–2.4), and EZ-Antivirus (6.1–6.3). The issue is a ZIP header handling flaw that lets re...

CVE-2004-0937

CVE-2004-0937 affects Sophos Anti-Virus prior to 3.87.0 and Sophos Anti-Virus for Windows 95/98/Me prior to 3.88.0. The issue allows remote attackers to bypass antivirus protection by delivering a ZIP archive whose local and global headers are set to zero, yet the archive can still be opened on t...

CVE-2004-0932

The CVE-2004-0932 issue affects McAfee Anti-Virus Engine DATS drivers before 4398 (and the DATS Driver before 4397). A crafted ZIP archive with both local and global headers set to zero can bypass antivirus protection and still be opened on the target system. This is a remote-exploitation-style b...

CVE-2004-0934

CVE-2004-0934 affects Kaspersky antivirus engines 3.x through 4.x. The connected material shows a ZIP archive header manipulation vulnerability where both the local and global headers can be set to zero, allowing the compressed file to be opened while bypassing protection. A PoC exists in ZIP han...

CVE-2005-1693

CVE-2005-1693 involves an integer overflow in the Computer Associates Vet Antivirus library used by CA InoculateIT 6.0, eTrust Antivirus (r6.0–7.1), eTrust Antivirus for the Gateway (r7.0–r7.1), eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup r11.1, Vet Antiv...

CVE-2004-1096

Archive::Zip (Perl) before 1.14 is affected; antivirus tools like amavisd-new can bypass protection by processing a ZIP with both local and global headers zeroed. The description notes the issue but does not specify fixed versions or patches in the provided sources. No exploitation details are gi...

CVE-2007-3875

CVE-2007-3875 : A DoS in CA/ eTrust Antivirus products caused by arclib.dll when processing a malformed CHM file. An invalid “previous listing chunk number” in CHM triggers an infinite loop, halting antivirus functionality. Affected CA products include CA Anti-Virus for the Enterprise (formerly e...

CVE-2000-0559

The CVE-2000-0559 entry describes a vulnerability in eTrust Intrusion Detection System (formerly SessionWall-3) where administrative passwords stored in the registry are protected with weak XOR encryption. The underlying issue is the weak encryption implementation, enabling a local attacker to de...

CVE-2007-3302

The CVE-2007-3302 issue affects CA eTrust Intrusion Detection’s CallCode ActiveX control (Caller.dll) and allows remote code execution by loading arbitrary DLLs via scriptable functions when the control is marked safe for scripting. Affected versions include Caller.dll 3.0 before 20070713 and 3.0...

CVE-2005-0968

CA eTrust Intrusion Detection 3.0 is affected. The issue arises in the Crypto API function CPImportKey, where large size values are not properly validated, enabling remote attackers to trigger a denial of service by sending crafted input and crashing the remote IDS service. The vulnerability is e...

CVE-2007-1005

CA eTrust Intrusion Detection (eID) is affected by CVE-2007-1005. A heap-based buffer/overrun occurs in SW3eng.exe within the eID Engine service when handling session keys for remote administration on port 9191/tcp, allowing a remote unauthenticated attacker to cause a denial of service (applicat...