CVE-2007-3875 (CNNVD-200707-453)
MEDIUM
中文标题:
CA eTrust多个产品安全漏洞
英文标题:
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA produc...
CVSS分数:
4.3
发布时间:
2007-07-26 00:00:00
漏洞类型:
其他
状态:
PUBLISHED
数据质量分数:
0.30
数据版本:
v3
漏洞描述
中文描述:
eTrust是CA推出的系列杀毒产品，现在更名为Anti-Virus for the Enterprise、Threat Manager、Anti-Spyware for the Enterprise等产品。 eTrust产品中的Arclib.DLL库存在安全漏洞，如果杀毒引擎扫描到了设置有无效previous listing chunk number字段的畸形CHM文件，扫描程序就会陷入死循环，无法再处理其他文件。
英文描述:
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.
CWE类型:
（暂无数据）
标签:
（暂无数据）
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| broadcom | anti-spyware | 2007 | - | - |
cpe:2.3:a:broadcom:anti-spyware:2007:*:*:*:*:*:*:*
|
| broadcom | anti-virus_for_the_enterprise | * | - | - |
cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:*:*:*:*:*:*:*:*
|
| broadcom | anti-virus_for_the_enterprise | 7.0 | - | - |
cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.0:*:*:*:*:*:*:*
|
| broadcom | anti-virus_for_the_enterprise | 7.1 | - | - |
cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.1:*:*:*:*:*:*:*
|
| broadcom | anti-virus_for_the_enterprise | 8 | - | - |
cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:8:*:*:*:*:*:*:*
|
| broadcom | anti-virus_for_the_enterprise | 8.1 | - | - |
cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:8.1:*:*:*:*:*:*:*
|
| broadcom | anti_virus_sdk | * | - | - |
cpe:2.3:a:broadcom:anti_virus_sdk:*:*:*:*:*:*:*:*
|
| broadcom | antispyware_for_the_enterprise | 8 | - | - |
cpe:2.3:a:broadcom:antispyware_for_the_enterprise:8:*:*:*:*:*:*:*
|
| broadcom | antispyware_for_the_enterprise | 8.1 | - | - |
cpe:2.3:a:broadcom:antispyware_for_the_enterprise:8.1:*:*:*:*:*:*:*
|
| broadcom | antivirus_sdk | * | - | - |
cpe:2.3:a:broadcom:antivirus_sdk:*:*:*:*:*:*:*:*
|
| broadcom | brightstor_arcserve_backup | 9.01 | - | - |
cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:*
|
| broadcom | brightstor_arcserve_backup | 11.1 | - | - |
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*
|
| broadcom | brightstor_arcserve_backup | 11.5 | - | - |
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*
|
| broadcom | brightstor_arcserve_client | * | - | - |
cpe:2.3:a:broadcom:brightstor_arcserve_client:*:*:*:*:*:*:*:*
|
| broadcom | brightstor_enterprise_backup | 10.5 | - | - |
cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:*
|
| broadcom | brigthstor_arcserve_client_for_windows | * | - | - |
cpe:2.3:a:broadcom:brigthstor_arcserve_client_for_windows:*:*:*:*:*:*:*:*
|
| broadcom | common_services | 11 | - | - |
cpe:2.3:a:broadcom:common_services:11:*:*:*:*:*:*:*
|
| broadcom | common_services | 11.1 | - | - |
cpe:2.3:a:broadcom:common_services:11.1:*:*:*:*:*:*:*
|
| broadcom | etrust_antivirus | 8 | - | - |
cpe:2.3:a:broadcom:etrust_antivirus:8:*:*:*:*:*:*:*
|
| broadcom | etrust_antivirus_gateway | 7.1 | - | - |
cpe:2.3:a:broadcom:etrust_antivirus_gateway:7.1:*:*:*:*:*:*:*
|
| broadcom | etrust_ez_antivirus | 6.1 | - | - |
cpe:2.3:a:broadcom:etrust_ez_antivirus:6.1:*:*:*:*:*:*:*
|
| broadcom | etrust_ez_antivirus | 7 | - | - |
cpe:2.3:a:broadcom:etrust_ez_antivirus:7:*:*:*:*:*:*:*
|
| broadcom | etrust_ez_armor | 1 | - | - |
cpe:2.3:a:broadcom:etrust_ez_armor:1:*:*:*:*:*:*:*
|
| broadcom | etrust_ez_armor | 2 | - | - |
cpe:2.3:a:broadcom:etrust_ez_armor:2:*:*:*:*:*:*:*
|
| broadcom | etrust_ez_armor | 3 | - | - |
cpe:2.3:a:broadcom:etrust_ez_armor:3:*:*:*:*:*:*:*
|
| broadcom | etrust_internet_security_suite | 1 | - | - |
cpe:2.3:a:broadcom:etrust_internet_security_suite:1:*:*:*:*:*:*:*
|
| broadcom | etrust_internet_security_suite | 2 | - | - |
cpe:2.3:a:broadcom:etrust_internet_security_suite:2:*:*:*:*:*:*:*
|
| broadcom | etrust_intrusion_detection | 2.0 | - | - |
cpe:2.3:a:broadcom:etrust_intrusion_detection:2.0:*:*:*:*:*:*:*
|
| broadcom | etrust_intrusion_detection | 3.0 | - | - |
cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*
|
| broadcom | internet_security_suite | 3.0 | - | - |
cpe:2.3:a:broadcom:internet_security_suite:3.0:*:*:*:*:*:*:*
|
| broadcom | secure_content_manager | 1.1 | - | - |
cpe:2.3:a:broadcom:secure_content_manager:1.1:*:*:*:*:*:*:*
|
| broadcom | secure_content_manager | 8.0 | - | - |
cpe:2.3:a:broadcom:secure_content_manager:8.0:*:*:*:*:*:*:*
|
| broadcom | threat_manager | 8 | - | - |
cpe:2.3:a:broadcom:threat_manager:8:*:*:*:*:*:*:*
|
| broadcom | unicenter_network_and_systems_management | 3.0 | - | - |
cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*
|
| broadcom | unicenter_network_and_systems_management | 3.1 | - | - |
cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:*
|
| broadcom | unicenter_network_and_systems_management | 11 | - | - |
cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11:*:*:*:*:*:*:*
|
| broadcom | unicenter_network_and_systems_management | 11.1 | - | - |
cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11.1:*:*:*:*:*:*:*
|
| ca | brightstor_arcserve_backup | 11 | - | - |
cpe:2.3:a:ca:brightstor_arcserve_backup:11:*:windows:*:*:*:*:*
|
| ca | etrust_intrusion_detection | 3.0 | - | - |
cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:*
|
| ca | protection_suites | r2 | - | - |
cpe:2.3:a:ca:protection_suites:r2:*:*:*:*:*:*:*
|
| ca | protection_suites | r3 | - | - |
cpe:2.3:a:ca:protection_suites:r3:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
参考链接
1018450
vdb-entry
cve.org
访问
cve.org
无标题
x_refsource_CONFIRM
cve.org
访问
cve.org
20070724 Computer Associates AntiVirus CHM File Handling DoS Vulnerability
third-party-advisory
cve.org
访问
cve.org
20070725 n.runs-SA-2007.024 - CA eTrust Antivirus Infinite Loop DoS (remote) Advisory
mailing-list
cve.org
访问
cve.org
ADV-2007-2639
vdb-entry
cve.org
访问
cve.org
20070725 [CAID 35525, 35526]: CA Products Arclib Library Denial of Service Vulnerabilities
mailing-list
cve.org
访问
cve.org
ca-arclib-chm-dos(35573)
vdb-entry
cve.org
访问
cve.org
20070726 RE: [CAID 35525, 35526]: CA Products Arclib Library Denial of Service Vulnerabilities
mailing-list
cve.org
访问
cve.org
无标题
x_refsource_CONFIRM
cve.org
访问
cve.org
25049
vdb-entry
cve.org
访问
cve.org
26155
third-party-advisory
cve.org
访问
cve.org
CVSS评分详情
4.3
MEDIUM
CVSS向量:
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS版本:
2.0
机密性
NONE
完整性
NONE
可用性
PARTIAL
时间信息
发布时间:
2007-07-26 00:00:00
修改时间:
2024-08-07 14:37:04
创建时间:
2025-11-11 15:32:45
更新时间:
2025-11-11 15:49:19
利用信息
暂无可利用代码信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2007-3875 |
2025-11-11 15:17:54 | 2025-11-11 07:32:45 |
| NVD | nvd_CVE-2007-3875 |
2025-11-11 14:52:11 | 2025-11-11 07:41:31 |
| CNNVD | cnnvd_CNNVD-200707-453 |
2025-11-11 15:08:57 | 2025-11-11 07:49:19 |
版本与语言
当前版本:
v3
主要语言:
EN
支持语言:
EN
ZH
安全公告
暂无安全公告信息
变更历史
v3
CNNVD
2025-11-11 15:49:19
vulnerability_type: 未提取 → 其他; cnnvd_id: 未提取 → CNNVD-200707-453; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-200707-453
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2
NVD
2025-11-11 15:41:31
cvss_score: 未提取 → 4.3; cvss_vector: NOT_EXTRACTED → AV:N/AC:M/Au:N/C:N/I:N/A:P; cvss_version: NOT_EXTRACTED → 2.0; affected_products_count: 0 → 41; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
- cvss_score: 未提取 -> 4.3
- cvss_vector: NOT_EXTRACTED -> AV:N/AC:M/Au:N/C:N/I:N/A:P
- cvss_version: NOT_EXTRACTED -> 2.0
- affected_products_count: 0 -> 41
- data_sources: ['cve'] -> ['cve', 'nvd']