Broadcom Internet Security Suite vulnerabilities

6 CVEs affecting Broadcom Internet Security Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3588, published 2009-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-2864, published 2007-06-06. High severity, CVSS 9.3. EPSS: 49.9% chance of exploitation in the next 30 days. Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large…
CVE-2009-3587, published 2009-10-13. High severity, CVSS 9.3. EPSS: 7.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust…
CVE-2007-3875, published 2007-07-26. Medium severity, CVSS 4.3. EPSS: 3.6% chance of exploitation in the next 30 days. arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus…
CVE-2009-3588, published 2009-10-13. Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust…
CVE-2008-2926, published 2008-08-12. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local…
CVE-2006-6496, published 2006-12-13. Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days. The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows…