Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2009-0042: Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus e

58
This month
HIGH 10.0DOWNGRADEDOWNGRADEDOWNGRADE

CVE-2009-0042 is a high-severity flaw (CVSS 10.0) affecting anti-spyware, anti-spyware for the enterprise, anti-virus. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.

Why this priority

  • Critical severity
  • EPSS top 9%: very likely to be exploited

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score10.0 (High)
EPSS exploit chance4.3% (top 9%)
CISA exploited listNo
Published2009-01-28
Last modified2026-06-16
Publisher (CNA): MITRE · Vendor: broadcom

Share: LinkedIn · X · Reddit

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

broadcom anti-spyware DOWNGRADE
Affected: 2007 · 2008
Fixed in: no fixed release known
Safe to downgrade to: a release before 2007
1. Check installed version
apt-cache policy anti-spyware || rpm -q anti-spyware || anti-spyware --version
2. No fixed release: DOWNGRADE to a release before 2007 (Debian / Ubuntu)
apt-cache madison anti-spyware sudo apt install anti-spyware=<VERSION_BEFORE_2007> sudo apt-mark hold anti-spyware
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list anti-spyware sudo dnf downgrade anti-spyware-<VERSION_BEFORE_2007> sudo dnf versionlock add anti-spyware
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
broadcom anti-spyware for the enterprise DOWNGRADE
Affected: 8.1 · r8
Fixed in: no fixed release known
Safe to downgrade to: a release before 8.1
1. Check installed version
apt-cache policy anti-spyware-for-the-enterprise || rpm -q anti-spyware-for-the-enterprise || anti-spyware-for-the-enterprise --version
2. No fixed release: DOWNGRADE to a release before 8.1 (Debian / Ubuntu)
apt-cache madison anti-spyware-for-the-enterprise sudo apt install anti-spyware-for-the-enterprise=<VERSION_BEFORE_8.1> sudo apt-mark hold anti-spyware-for-the-enterprise
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list anti-spyware-for-the-enterprise sudo dnf downgrade anti-spyware-for-the-enterprise-<VERSION_BEFORE_8.1> sudo dnf versionlock add anti-spyware-for-the-enterprise
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
broadcom anti-virus DOWNGRADE
Affected: 2007 8 · 2008
Fixed in: no fixed release known
Safe to downgrade to: a release before 2007
1. Check installed version
apt-cache policy anti-virus || rpm -q anti-virus || anti-virus --version
2. No fixed release: DOWNGRADE to a release before 2007 (Debian / Ubuntu)
apt-cache madison anti-virus sudo apt install anti-virus=<VERSION_BEFORE_2007> sudo apt-mark hold anti-virus
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list anti-virus sudo dnf downgrade anti-virus-<VERSION_BEFORE_2007> sudo dnf versionlock add anti-virus
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
broadcom anti-virus for the enterprise DOWNGRADE
Affected: 7.1 · 8.1 · r8
Fixed in: no fixed release known
Safe to downgrade to: a release before 7.1
1. Check installed version
apt-cache policy anti-virus-for-the-enterprise || rpm -q anti-virus-for-the-enterprise || anti-virus-for-the-enterprise --version
2. No fixed release: DOWNGRADE to a release before 7.1 (Debian / Ubuntu)
apt-cache madison anti-virus-for-the-enterprise sudo apt install anti-virus-for-the-enterprise=<VERSION_BEFORE_7.1> sudo apt-mark hold anti-virus-for-the-enterprise
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list anti-virus-for-the-enterprise sudo dnf downgrade anti-virus-for-the-enterprise-<VERSION_BEFORE_7.1> sudo dnf versionlock add anti-virus-for-the-enterprise
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
broadcom anti-virus sdk MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy anti-virus-sdk || rpm -q anti-virus-sdk || anti-virus-sdk --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
broadcom antivirus gateway DOWNGRADE
Affected: 7.1
Fixed in: no fixed release known
Safe to downgrade to: a release before 7.1
1. Check installed version
apt-cache policy antivirus-gateway || rpm -q antivirus-gateway || antivirus-gateway --version
2. No fixed release: DOWNGRADE to a release before 7.1 (Debian / Ubuntu)
apt-cache madison antivirus-gateway sudo apt install antivirus-gateway=<VERSION_BEFORE_7.1> sudo apt-mark hold antivirus-gateway
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list antivirus-gateway sudo dnf downgrade antivirus-gateway-<VERSION_BEFORE_7.1> sudo dnf versionlock add antivirus-gateway
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2009-0042?

anti-spyware: downgrade or apply the listed mitigation; anti-spyware for the enterprise: downgrade or apply the listed mitigation; anti-virus: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2009-0042 being exploited?

CVE-2009-0042 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2009-0042 affect?

CVE-2009-0042 affects anti-spyware, anti-spyware for the enterprise, anti-virus. Severity is high (CVSS 10.0). Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 200

How urgent is CVE-2009-0042?

Priority 58/100. Critical severity; EPSS top 9%: very likely to be exploited

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.