Priority HIGH 71
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the co…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.49928 · Published 2007-06-06 · No fix listed
Priority HIGH 68
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and gl…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.63644 · Published 2004-11-19 · No fix listed
Priority MEDIUM 53
Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intru…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06886 · Published 2005-05-24 · No fix listed
Priority MEDIUM 52
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-An…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.20851 · Published 2004-11-19 · No fix listed
Priority MEDIUM 51
Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, whic…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.18476 · Published 2004-12-01 · No fix listed
Priority MEDIUM 50
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; In…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07605 · Published 2009-10-13 · No fix listed
Priority MEDIUM 49
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.14902 · Published 2004-11-19 · No fix listed
Priority MEDIUM 49
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.14902 · Published 2004-11-19 · No fix listed
Priority MEDIUM 49
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file f…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.1546 · Published 2004-11-19 · No fix listed
Priority MEDIUM 49
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target s…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.14902 · Published 2004-11-19 · No fix listed
Priority MEDIUM 42
Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06487 · Published 2006-06-27 · No fix listed
Priority LOW 29
The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with admi…
CVSS 2.0MEDIUM 6.6· Local · Low privileges · Interaction — · EPSS 0.0038 · Published 2006-12-13 · No fix listed
Priority LOW 27
Multiple interpretation error in unspecified versions of (1) eTrust-Iris and (2) eTrust-Vet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malf…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.01723 · Published 2005-10-14 · No fix listed
Priority LOW 26
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an inval…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03568 · Published 2007-07-26 · No fix listed
Priority LOW 26
Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associat…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.01434 · Published 2005-10-29 · No fix listed
Priority LOW 25
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; In…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02394 · Published 2009-10-13 · No fix listed