CVE-2005-1693

CA eTrust Antivirus - Heap-Based Buffer Overflow via Compressed VBA Directory

Title source: llm
STIX 2.1

Description

Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup (BAB) r11.1, Vet Antivirus, Zonelabs ZoneAlarm Security Suite, and ZoneAlarm Antivirus, allows remote attackers to gain privileges via a compressed VBA directory with a project name length of -1, which leads to a heap-based buffer overflow.

References (8)

Core 8
Core References
Patch, Vendor Advisory x_refsource_misc
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32896
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111686576416450&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1014050
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/15470
Various Sources x_refsource_misc
http://www.rem0te.com/public/images/vet.pdf
Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13710
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/15479

Scores

EPSS 0.0514
EPSS Percentile 90.0%

Details

Status published
Products (28)
broadcom/etrust_antivirus 6.0
broadcom/etrust_antivirus 7.0
broadcom/etrust_antivirus 7.1
broadcom/etrust_antivirus_ee 6.0
broadcom/etrust_antivirus_ee 7.0
broadcom/etrust_ez_armor 1.0
broadcom/etrust_ez_armor 2.0
broadcom/etrust_ez_armor 2.3
broadcom/etrust_ez_armor 2.4
broadcom/etrust_ez_armor 2.4.4
... and 18 more
Published May 24, 2005
Tracked Since Feb 18, 2026