CVE-2007-3875

CA Anti-Virus < 8 - Denial of Service via CHM File Parsing

Title source: llm
STIX 2.1

Description

arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.

References (11)

Core 11
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018450
Patch third-party-advisory x_refsource_idefense
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=567
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/474605/100/100/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2639
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/474601/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35573
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/474683/100/0/threaded
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25049
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26155

Scores

EPSS 0.0332
EPSS Percentile 87.4%

Details

Status published
Products (41)
broadcom/anti-spyware 2007
broadcom/anti-virus_for_the_enterprise 7.0
broadcom/anti-virus_for_the_enterprise 7.1
broadcom/anti-virus_for_the_enterprise 8
broadcom/anti-virus_for_the_enterprise 8.1
broadcom/anti-virus_for_the_enterprise < 8
broadcom/anti_virus_sdk
broadcom/antispyware_for_the_enterprise 8
broadcom/antispyware_for_the_enterprise 8.1
broadcom/antivirus_sdk
... and 31 more
Published Jul 26, 2007
Tracked Since Feb 18, 2026