← Vulnerability feed

Vulnerability record · CVE-2009-0042 · published 28 January 2009

CVE-2009-0042: Broadcom anti-spyware vulnerability

Broadcom · Anti Spyware

Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.

10.0 CVSS 2.0 High EPSS 4.3% · top 9.3%
10.0CVSS 2.0 base score
4.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
19Affected product versions listed by NVD
14References
16 Jun 2026Last modified by NVD

Description

Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

19 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-eva Vendor Advisory
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601
http://www.securityfocus.com/archive/1/500417/100/0/threaded
http://www.securityfocus.com/bid/33464
http://www.securitytracker.com/id?1021639
http://www.vupen.com/english/advisories/2009/0270
https://exchange.xforce.ibmcloud.com/vulnerabilities/48261
http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-eva Vendor Advisory
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601
http://www.securityfocus.com/archive/1/500417/100/0/threaded
http://www.securityfocus.com/bid/33464
http://www.securitytracker.com/id?1021639
http://www.vupen.com/english/advisories/2009/0270
https://exchange.xforce.ibmcloud.com/vulnerabilities/48261

Track CVE-2009-0042 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2007-2863Broadcom anti-virus for the enterprise vulnerabilityStack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote …EPSS 23%9.3CVE-2009-3587Broadcom anti-virus vulnerabilityUnspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 throug…EPSS 7.6%9.3CVE-2007-2864CA Anti-Virus engine stack buffer overflow via crafted CAB fileThe Anti-Virus engine in multiple CA (Computer Associates) products before content update 30.6 has a stack-based buffer overflow triggered by a large…EPSS 50%analysed9.0CVE-2007-4620CA Alert Notification Service stack buffer overflow via RPCMultiple stack-based buffer overflows exist in Computer Associates Alert Notification Service (Alert.exe) versions 8.1.586.0, 8.0.450.0, and 7.1.758.…EPSS 52%analysed4.3CVE-2009-3588Broadcom anti-virus vulnerabilityUnspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 throug…EPSS 2.4%4.3CVE-2007-3875Broadcom anti-spyware vulnerabilityarclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of s…EPSS 3.5%

Source: NIST National Vulnerability Database (record CVE-2009-0042), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.