CVE-2009-3587: broadcom anti-virus

EPSS trend

Probability

7.61%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 7.61% on 18-09-2026

18-09-202618-10-2026

EPSS score

7.61%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

8 links

support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878X Refsource CONFIRMBroken LinkPatchVendor Advisory
osvdb.org/58691VDB EntryX Refsource OSVDBBroken Link
secunia.com/advisories/36976Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1022999VDB EntryX Refsource SECTRACKThird Party Advisory
www.vupen.com/english/advisories/2009/2852VDB EntryX Refsource VUPENVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/53697VDB EntryX Refsource XFThird Party Advisory
www.securityfocus.com/archive/1/507068/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/36653VDB EntryX Refsource BIDThird Party Advisory

Related vulnerabilities

CVE-2007-2864broadcomanti-virus_for_the_enterprise+1149.93%19y ago06-06-2007 21:00Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.CVE-2007-2863broadcomanti-virus_for_the_enterprise+523.41%19y ago06-06-2007 21:00Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a long filename in a .CAB file.CVE-2007-4620broadcomanti-virus_for_the_enterprise+352.27%18y ago07-04-2008 18:00Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.CVE-2007-3875broadcomanti-spyware+183.57%19y ago26-07-2007 00:00arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.CVE-2004-2436broadcomcommon_services+20.47%21y ago20-08-2005 04:00Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.CVE-2009-0042broadcomanti-spyware+154.27%17y ago28-01-2009 01:00Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.

All vulnerabilities inanti-virus anti-virus_for_the_enterprise common_services etrust_antivirus etrust_integrated_threat_management

CVE-2009-3587: broadcom anti-virus

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References