CVE:CVE-2009-3587
CNNVD:CNNVD-200910-199
Computer Associates是世界领先的安全厂商，产品包括多种杀毒软件及备份恢复系统。
多个CA产品杀毒引擎所使用的arclib组件在解析畸形RAR压缩文件时存在堆栈内存破坏，用户受骗打开恶意文件就会导致拒绝服务或执行任意指令。
solution:Upgrade broadcom anti-virus to a higher version than 2007:8,2008,and avoid the version 2007:8,2008; Upgrade broadcom anti-virus_for_the_enterprise to a higher version than 7.1,r8,and avoid the version 7.1,r8; Upgrade broadcom anti-virus_sdk to a higher version than *; Upgrade broadcom common_services to a higher version than 11,11.1,and avoid the version 11,11.1; Upgrade broadcom etrust_antivirus to a higher version than 7.1,8,8.1,and avoid the version 7.1,8,8.1; Upgrade broadcom etrust_integrated_threat_management to a higher version than 8.1,and avoid the version 8.1; Upgrade broadcom etrust_intrusion_detection to a higher version than 3.0,and avoid the version 3.0; Upgrade broadcom etrust_secure_content_manager to a higher version than 1.1,and avoid the version 1.1; Upgrade broadcom internet_security_suite to a higher version than *,3.0,and avoid the version 3.0; Upgrade broadcom network_and_systems_management to a higher version than r3.0,r3.1,r11,r11.1,and avoid the version r3.0,r3.1,r11,r11.1; Upgrade broadcom secure_content_manager to a higher version than 1.1,8.0,and avoid the version 1.1,8.0; Upgrade broadcom unicenter_network_and_systems_management to a higher version than 3.0,3.1,11,11.1,and avoid the version 3.0,3.1,11,11.1; Upgrade ca anti-virus to a higher version than 2009,and avoid the version 2009; Upgrade ca anti-virus_for_the_enterprise to a higher version than r8.1,and avoid the version r8.1; Upgrade ca anti-virus_gateway to a higher version than 7.1,and avoid the version 7.1; Upgrade ca anti-virus_plus to a higher version than 2009,and avoid the version 2009; Upgrade ca arcserve_backup to a higher version than r11.5,r11.1,and avoid the version r11.5,r11.1; Upgrade ca arcserve_for_windows_client_agent to a higher version than *; Upgrade ca arcserve_for_windows_server_component to a higher version than *; Upgrade ca common_services to a higher version than 3.1,and avoid the version 3.1; Upgrade ca etrust_anti-virus_gateway to a higher version than 7.1,and avoid the version 7.1; Upgrade ca etrust_anti-virus_sdk to a higher version than *; Upgrade ca etrust_ez_antivirus to a higher version than r7.1,and avoid the version r7.1; Upgrade ca etrust_intrusion_detection to a higher version than 2.0:sp1,3.0:sp1,and avoid the version 2.0:sp1,3.0:sp1; Upgrade ca etrust_secure_content_manager to a higher version than 8.0,and avoid the version 8.0; Upgrade ca gateway_security to a higher version than r8.1,and avoid the version r8.1; Upgrade ca internet_security_suite_2008 to a higher version than *; Upgrade ca internet_security_suite_plus_2008 to a higher version than *; Upgrade ca internet_security_suite_plus_2009 to a higher version than *; Upgrade ca protection_suites to a higher version than r2,r3,r3.1,and avoid the version r2,r3,r3.1; Upgrade ca threat_manager to a higher version than 8.1,r8,and avoid the version 8.1,r8; Upgrade ca threat_manager_total_defense to a higher version than *