← Vulnerability feed

Vulnerability record · CVE-2007-3875 · published 26 July 2007

CVE-2007-3875: Broadcom anti-spyware vulnerability

Broadcom · Anti Spyware

arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.

4.3 CVSS 2.0 Medium EPSS 3.5% · top 11.1%
4.3CVSS 2.0 base score
3.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
23Affected product versions listed by NVD
22References
16 Jun 2026Last modified by NVD

Description

arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.

AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

23 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=567 Patch
http://secunia.com/advisories/26155 PatchVendor Advisory
http://supportconnectw.ca.com/public/antivirus/infodocs/caprodarclib-secnot.asp Patch
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149847
http://www.securityfocus.com/archive/1/474601/100/0/threaded
http://www.securityfocus.com/archive/1/474605/100/100/threaded
http://www.securityfocus.com/archive/1/474683/100/0/threaded
http://www.securityfocus.com/bid/25049 Patch
http://www.securitytracker.com/id?1018450
http://www.vupen.com/english/advisories/2007/2639
https://exchange.xforce.ibmcloud.com/vulnerabilities/35573
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=567 Patch
http://secunia.com/advisories/26155 PatchVendor Advisory
http://supportconnectw.ca.com/public/antivirus/infodocs/caprodarclib-secnot.asp Patch
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149847
http://www.securityfocus.com/archive/1/474601/100/0/threaded
http://www.securityfocus.com/archive/1/474605/100/100/threaded
http://www.securityfocus.com/archive/1/474683/100/0/threaded
http://www.securityfocus.com/bid/25049 Patch
http://www.securitytracker.com/id?1018450
http://www.vupen.com/english/advisories/2007/2639
https://exchange.xforce.ibmcloud.com/vulnerabilities/35573

Track CVE-2007-3875 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-0042Broadcom anti-spyware vulnerabilityMultiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterpr…EPSS 4.3%10.0CVE-2007-2863Broadcom anti-virus for the enterprise vulnerabilityStack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote …EPSS 23%10.0CVE-2007-2522Broadcom antispyware for the enterprise memory buffer overflow vulnerabilityStack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r…EPSS 27%9.3CVE-2009-3587Broadcom anti-virus vulnerabilityUnspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 throug…EPSS 7.6%9.3CVE-2007-2864CA Anti-Virus engine stack buffer overflow via crafted CAB fileThe Anti-Virus engine in multiple CA (Computer Associates) products before content update 30.6 has a stack-based buffer overflow triggered by a large…EPSS 50%analysed9.0CVE-2007-4620CA Alert Notification Service stack buffer overflow via RPCMultiple stack-based buffer overflows exist in Computer Associates Alert Notification Service (Alert.exe) versions 8.1.586.0, 8.0.450.0, and 7.1.758.…EPSS 52%analysed4.3CVE-2009-3588Broadcom anti-virus vulnerabilityUnspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 throug…EPSS 2.4%

Source: NIST National Vulnerability Database (record CVE-2007-3875), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.