Broadcom Etrust Intrusion Detection vulnerabilities

16 CVEs affecting Broadcom Etrust Intrusion Detection, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3588, published 2009-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0932, published 2005-01-27. High severity, CVSS 7.5. EPSS: 63.6% chance of exploitation in the next 30 days. McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file…
CVE-2004-0933, published 2005-01-27. High severity, CVSS 7.5. EPSS: 20.9% chance of exploitation in the next 30 days. Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0…
CVE-2004-1096, published 2005-01-10. High severity, CVSS 7.5. EPSS: 19% chance of exploitation in the next 30 days. Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global…
CVE-2004-0935, published 2005-01-27. High severity, CVSS 7.5. EPSS: 15.5% chance of exploitation in the next 30 days. Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent…
CVE-2004-0937, published 2005-02-09. High severity, CVSS 7.5. EPSS: 14.9% chance of exploitation in the next 30 days. Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and…
CVE-2004-0934, published 2005-01-27. High severity, CVSS 7.5. EPSS: 14.9% chance of exploitation in the next 30 days. Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being…
CVE-2004-0936, published 2005-01-27. High severity, CVSS 7.5. EPSS: 14.9% chance of exploitation in the next 30 days. RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened…
CVE-2007-3302, published 2007-07-26. High severity, CVSS 9.3. EPSS: 10.8% chance of exploitation in the next 30 days. The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary…
CVE-2009-3587, published 2009-10-13. High severity, CVSS 9.3. EPSS: 7.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust…
CVE-2007-1005, published 2007-03-02. High severity, CVSS 7.8. EPSS: 6.9% chance of exploitation in the next 30 days. Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of…

Latest

CVE-2009-3588, published 2009-10-13. Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust…
CVE-2009-0042, published 2009-01-28. High severity, CVSS 10.0. EPSS: 4.3% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and…
CVE-2007-3875, published 2007-07-26. Medium severity, CVSS 4.3. EPSS: 3.6% chance of exploitation in the next 30 days. arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus…
CVE-2005-1693, published 2005-05-24. High severity, CVSS 10.0. EPSS: 6.9% chance of exploitation in the next 30 days. Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content…
CVE-2005-0968, published 2005-05-02. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Computer Associates (CA) eTrust Intrusion Detection 3.0 allows remote attackers to cause a denial of service via large size values that are not properly validated before calling the CPImportKey…