Broadcom Anti-Spyware vulnerabilities

2 CVEs affecting Broadcom Anti-Spyware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0042, published 2009-01-28.

More from Broadcom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-0042, published 2009-01-28. High severity, CVSS 10.0. EPSS: 4.3% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and…
• CVE-2007-3875, published 2007-07-26. Medium severity, CVSS 4.3. EPSS: 3.6% chance of exploitation in the next 30 days. arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus…