CVE-2005-1693 Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content M...
HighCVSS 10.0
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup (BAB) r11.1, Vet Antivirus, Zonelabs ZoneAlarm Security Suite, and ZoneAlarm Antivirus, allows remote attackers to gain privileges via a compressed VBA directory with a project name length of -1, which leads to a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom etrust antivirus | = 6.0 | No fix listed |
| broadcom etrust antivirus | = 7.0 | No fix listed |
| broadcom etrust antivirus | = 7.1 | No fix listed |
| broadcom etrust antivirus ee | = 6.0 | No fix listed |
| broadcom etrust antivirus ee | = 7.0 | No fix listed |
| broadcom etrust ez armor | = 1.0 | No fix listed |
| broadcom etrust ez armor | = 2.0 | No fix listed |
| broadcom etrust ez armor | = 2.3 | No fix listed |
| broadcom etrust ez armor | = 2.4 | No fix listed |
| broadcom etrust ez armor | = 2.4.4 | No fix listed |
| broadcom etrust ez armor le | = 2.0 | No fix listed |
| broadcom etrust ez armor le | = 3.0.0.14 | No fix listed |
| broadcom etrust intrusion detection | = 1.4.1.13 | No fix listed |
| broadcom etrust intrusion detection | = 1.4.5 | No fix listed |
| broadcom etrust intrusion detection | = 1.5 | No fix listed |
| broadcom etrust intrusion detection | = 3.0 | No fix listed |
| broadcom etrust secure content manager | = 1.0 | No fix listed |
| broadcom etrust secure content manager | = 1.1 | No fix listed |
| broadcom inoculateit | = 6.0 | No fix listed |
| ca brightstor arcserve backup | = 11.1 | No fix listed |
| ca etrust antivirus | = 7.0 | No fix listed |
| ca etrust antivirus | = 7.0_sp2 | No fix listed |
| ca etrust antivirus | = 7.1 | No fix listed |
| ca etrust intrusion detection | = 3.0-sp1 | No fix listed |
| ca etrust secure content manager | = 1.0-sp1 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ca vet antivirus | = 10.66 | No fix listed |
| zonelabs zonealarm | All versions | No fix listed |
| zonelabs zonealarm antivirus | All versions | No fix listed |
References
- crm.my-etrust.com patch
- 20050523 Computer Associates Vet Antivirus Library Remote Heap Overflow mailing-list
- 15470 third-party-advisory
- 15479 third-party-advisory
- 1014050 vdb-entry
- www.rem0te.com
- 13710 vdb-entry vendor-advisory
- www3.ca.com patch vendor-advisory