CVE-2007-3875

Related Files

CA Security Advisory 35525

Posted Jul 25, 2007

Authored by Ken Williams, Computer Associates | Site www3.ca.com

CA products that utilize the Arclib library contain two denial of service vulnerabilities. The first vulnerability is due to an application hang when processing a specially malformed CHM file. The second vulnerability is due to an application hang when processing a specially malformed RAR file.

tags | advisory, denial of service, vulnerability

advisories | CVE-2007-3875, CVE-2007-5645

SHA-256 | 01a0d7692b70c516c3cfb44baa9d756e9080e6e2262ee925e1c28f0efba48ff3

Download | Favorite | View

iDEFENSE Security Advisory 2007-07-24.1

Posted Jul 25, 2007

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 07.24.07 - Remote exploitation of a denial of Service (DoS) vulnerability in Computer Associates Inc.'s eTrust Antivirus products could allow attackers to create a DoS condition on the affected computer. When eTrust Antivirus engine scans a malformed CHM file that has an invalid 'previous listing chunk number' field, the scanner will enter an infinite loop and be unable to process any other files. iDefense has confirmed this vulnerability in eTrust AntiVirus version r8. Previous versions of eTrust Antivirus are suspected vulnerable. Other Computer Associates products, as well as derived products, may also be vulnerable.

tags | advisory, remote, denial of service

advisories | CVE-2007-3875

SHA-256 | 04c66f8b25bb6d61d26d34c817ccf1842cdfb1a9e492bfaf3dba8ca5cc441556

Download | Favorite | View