CVE-2007-3875: Broadcom Anti-Spyware

Medium severity, CVSS 4.3. EPSS: 3.6% chance of exploitation in the next 30 days.

arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.

Affected products

• Broadcom Anti-Spyware: version 2007 only
• Broadcom Anti-Virus For The Enterprise: up to and including 8; version 7.0 only; version 7.1 only; version 8 only; version 8.1 only
• Broadcom Anti Virus SDK: any version
• Broadcom Antispyware For The Enterprise: version 8 only; version 8.1 only
• Broadcom Antivirus SDK: any version
• Broadcom Brightstor Arcserve Backup: version 9.01 only; version 11.1 only; version 11.5 only
• Broadcom Brightstor Arcserve Client: any version
• Broadcom Brightstor Enterprise Backup: version 10.5 only
• Broadcom Brigthstor Arcserve Client For Windows: any version
• Broadcom Common Services: version 11 only; version 11.1 only
• Broadcom Etrust Antivirus: version 8 only
• Broadcom Etrust Antivirus Gateway: version 7.1 only
• Broadcom Etrust Ez Antivirus: version 6.1 only; version 7 only
• Broadcom Etrust Ez Armor: version 1 only; version 2 only; version 3 only
• Broadcom Etrust Internet Security Suite: version 1 only; version 2 only
• Broadcom Etrust Intrusion Detection: version 2.0 only; version 3.0 only
• Broadcom Internet Security Suite: version 3.0 only
• Broadcom Secure Content Manager: version 1.1 only; version 8.0 only
• Broadcom Threat Manager: version 8 only
• Broadcom Unicenter Network And Systems Management: version 3.0 only; version 3.1 only; version 11 only; version 11.1 only
• Ca Brightstor Arcserve Backup: version 11 only
• Ca Etrust Intrusion Detection: version 3.0 only
• Ca Protection Suites: version r2 only; version r3 only

Published 2007-07-26. Last modified 2026-06-16.