CVE-2009-0042: Broadcom Anti-Spyware

High severity, CVSS 10.0. EPSS: 4.3% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.

Affected products

• Broadcom Anti-Spyware: version 2007 only; version 2008 only
• Broadcom Anti-Spyware For The Enterprise: version 8.1 only; version r8 only
• Broadcom Anti-Virus: version 2007 only; version 2008 only
• Broadcom Anti-Virus For The Enterprise: version 7.1 only; version 8.1 only; version r8 only
• Broadcom Anti-Virus SDK: any version
• Broadcom Antivirus Gateway: version 7.1 only
• Broadcom Arcserve Client Agent: affected versions not specified
• Broadcom Common Services: version 11 only; version 11.1 only
• Broadcom Etrust Ez Antivirus: version r6.1 only; version r7 only
• Broadcom Etrust Intrusion Detection: version 3.0 only; version 4.0 only
• Broadcom Network And Systems Management: version r3.0 only; version r3.1 only; version r11 only; version r11.1 only
• Broadcom Secure Content Manager: version 8.0 only; version 8.1 only
• Ca Arcserve Backup: version r11.1 only; version r11.5_nil_ only; version r12.0_nil_ only
• Ca Etrust Intrusion Detection: version 2.0 only; version 3.0 only
• Ca Internet Security Suite 2007: version 3 only
• Ca Internet Security Suite 2008: any version
• Ca Internet Security Suite Plus 2008: any version
• Ca Protection Suites: version r2 only; version r3 only; version r3.1 only
• Ca Threat Manager For The Enterprise: version 8.1 only; version r8 only

Published 2009-01-28. Last modified 2026-06-16.