CVE-2006-3223: broadcom etrust_antivirus

EPSS trend

Probability

6.67%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.67% on 19-09-2026

19-09-202619-10-2026

EPSS score

6.67%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

10 links

www.securityfocus.com/bid/18689VDB EntryX Refsource BID
lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.htmlMailing ListX Refsource FULLDISC
exchange.xforce.ibmcloud.com/vulnerabilities/27374VDB EntryX Refsource XF
www.securityfocus.com/archive/1/438503/100/0/threadedMailing ListX Refsource BUGTRAQ
www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325X Refsource CONFIRMPatchVendor Advisory
secunia.com/advisories/20856Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/2565VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/438582/100/0/threadedMailing ListX Refsource BUGTRAQ
www.osvdb.org/26654VDB EntryX Refsource OSVDB
securitytracker.com/id?1016391VDB EntryX Refsource SECTRACK

Related vulnerabilities

CVE-2007-2523broadcomintegrated_threat_management+11.38%19y ago11-05-2007 03:55CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before 8.0.448.0.CVE-2007-2864broadcomanti-virus_for_the_enterprise+1149.93%19y ago06-06-2007 21:00Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.CVE-2007-2522broadcomantispyware_for_the_enterprise+226.59%19y ago11-05-2007 03:55Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long (1) username or (2) password.CVE-2007-3875broadcomanti-spyware+183.57%19y ago26-07-2007 00:00arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.CVE-2005-1693broadcometrust_antivirus+116.89%21y ago24-05-2005 04:00Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup (BAB) r11.1, Vet Antivirus, Zonelabs ZoneAlarm Security Suite, and ZoneAlarm Antivirus, allows remote attackers to gain privileges via a compressed VBA directory with a project name length of -1, which leads to a heap-based buffer overflow.CVE-2005-3372broadcometrust_antivirus1.43%20y ago29-10-2005 19:00Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."

All vulnerabilities inetrust_antivirus etrust_pestpatrol integrated_threat_management

CVE-2006-3223: broadcom etrust_antivirus

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References