← Vulnerability feed

Vulnerability record · CVE-2005-1693 · published 24 May 2005

CVE-2005-1693: Broadcom etrust antivirus vulnerability

Broadcom · Etrust Antivirus

Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup (BAB) r11.1, Vet Antivirus, Zonelabs ZoneAlarm Security Suite, and ZoneAlarm Antivirus, allows remote attackers to gain privileges via a compressed VBA directory with a project name length of -1, which leads to a heap-based buffer overflow.

10.0 CVSS 2.0 High EPSS 6.9% · top 6.2%
10.0CVSS 2.0 base score
6.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
14Affected product versions listed by NVD
16References
16 Jun 2026Last modified by NVD

Description

Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup (BAB) r11.1, Vet Antivirus, Zonelabs ZoneAlarm Security Suite, and ZoneAlarm Antivirus, allows remote attackers to gain privileges via a compressed VBA directory with a project name length of -1, which leads to a heap-based buffer overflow.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

14 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter=1588 Patch
http://marc.info/?l=bugtraq&m=111686576416450&w=2
http://secunia.com/advisories/15470
http://secunia.com/advisories/15479
http://securitytracker.com/id?1014050
http://www.rem0te.com/public/images/vet.pdf
http://www.securityfocus.com/bid/13710 Vendor Advisory
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32896 PatchVendor Advisory
http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter=1588 Patch
http://marc.info/?l=bugtraq&m=111686576416450&w=2
http://secunia.com/advisories/15470
http://secunia.com/advisories/15479
http://securitytracker.com/id?1014050
http://www.rem0te.com/public/images/vet.pdf
http://www.securityfocus.com/bid/13710 Vendor Advisory
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32896 PatchVendor Advisory

Track CVE-2005-1693 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-0042Broadcom anti-spyware vulnerabilityMultiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterpr…EPSS 4.3%9.3CVE-2009-3587Broadcom anti-virus vulnerabilityUnspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 throug…EPSS 7.6%9.3CVE-2007-3302Broadcom etrust intrusion detection vulnerabilityThe CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion De…EPSS 11%9.3CVE-2007-2864CA Anti-Virus engine stack buffer overflow via crafted CAB fileThe Anti-Virus engine in multiple CA (Computer Associates) products before content update 30.6 has a stack-based buffer overflow triggered by a large…EPSS 50%analysed7.8CVE-2007-1005Broadcom etrust intrusion detection vulnerabilityHeap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earli…EPSS 6.7%7.5CVE-2006-3223Broadcom etrust antivirus vulnerabilityFormat string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to caus…EPSS 6.7%7.5CVE-2004-0937Archive zip vulnerabilitySophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protecti…EPSS 15%7.5CVE-2004-0932McAfee Anti-Virus Engine DATS driver bypass via malformed compressed fileThe McAfee Anti-Virus Engine DATS drivers before 4398 (Oct 13 2004) and DATS Driver before 4397 (Oct 6 2004) fail to properly handle compressed files…EPSS 63%analysed

Source: NIST National Vulnerability Database (record CVE-2005-1693), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.