CVE-2009-3588: Broadcom Anti-Virus

Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.

Affected products

  • Broadcom Anti-Virus: version 2007 only; version 2008 only
  • Broadcom Anti-Virus For The Enterprise: version 7.1 only; version r8 only
  • Broadcom Anti-Virus SDK: any version
  • Broadcom Arcserve Backup: version r12.0 only
  • Broadcom Common Services: version 11 only; version 11.1 only
  • Broadcom Etrust Antivirus: version 7.1 only; version 8 only; version 8.1 only
  • Broadcom Etrust Integrated Threat Management: version 8.1 only
  • Broadcom Etrust Intrusion Detection: version 3.0 only
  • Broadcom Etrust Secure Content Manager: version 1.1 only
  • Broadcom Internet Security Suite: any version; version 3.0 only
  • Broadcom Network And Systems Management: version r3.0 only; version r3.1 only; version r11 only; version r11.1 only
  • Broadcom Secure Content Manager: version 1.1 only; version 8.0 only
  • Broadcom Unicenter Network And Systems Management: version 3.0 only; version 3.1 only; version 11 only; version 11.1 only
  • Ca Anti-Virus: version 2009 only
  • Ca Anti-Virus For The Enterprise: version r8.1 only
  • Ca Anti-Virus Gateway: version 7.1 only
  • Ca Anti-Virus Plus: version 2009 only
  • Ca Arcserve Backup: version r11.5 only; version r11.1 only
  • Ca Arcserve For Windows Client Agent: any version
  • Ca Arcserve For Windows Server Component: any version
  • Ca Common Services: version 3.1 only
  • Ca Etrust Anti-Virus Gateway: version 7.1 only
  • Ca Etrust Anti-Virus SDK: any version
  • Ca Etrust Ez Antivirus: version r7.1 only
  • Ca Etrust Intrusion Detection: version 2.0 only; version 3.0 only
  • and 8 more

Published 2009-10-13. Last modified 2026-06-16.