CVE-2007-3875

CVE-2007-3875 is a medium-severity vulnerability in Broadcom Anti-spyware with a CVSS 2.0 base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

• Severity: Medium (CVSS 2.0 base score 4.3)
• EPSS exploit prediction: 4% (88th percentile)
• Actively exploited: Not listed in CISA KEV
• Affected product: Broadcom Anti-spyware
• Published: 2007-07-26
• Last modified: 2026-06-16

Description

arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.

Frequently asked questions

What is CVE-2007-3875?

arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.

How severe is CVE-2007-3875?

CVE-2007-3875 has a CVSS 2.0 base score of 4.3, rated medium severity.

Is CVE-2007-3875 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (88th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-3875?

CVE-2007-3875 primarily affects Broadcom Anti-spyware. In total, 41 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2007-3875?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2007-3875 published?

CVE-2007-3875 was published on 2007-07-26 and last updated on 2026-06-16.

References

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=567
• http://secunia.com/advisories/26155
• http://supportconnectw.ca.com/public/antivirus/infodocs/caprodarclib-secnot.asp
• http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149847
• http://www.securityfocus.com/archive/1/474601/100/0/threaded
• http://www.securityfocus.com/archive/1/474605/100/100/threaded
• http://www.securityfocus.com/archive/1/474683/100/0/threaded
• http://www.securityfocus.com/bid/25049
• http://www.securitytracker.com/id?1018450
• http://www.vupen.com/english/advisories/2007/2639
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35573

Affected products (41)

• cpe:2.3:a:broadcom:anti-spyware:2007:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:*:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:8:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:8.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:anti_virus_sdk:*:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:antispyware_for_the_enterprise:8:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:antispyware_for_the_enterprise:8.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:antivirus_sdk:*:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:brightstor_arcserve_client:*:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:brigthstor_arcserve_client_for_windows:*:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:common_services:11:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:common_services:11.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:etrust_antivirus:8:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:etrust_antivirus_gateway:7.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:etrust_ez_antivirus:6.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:etrust_ez_antivirus:7:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:etrust_ez_armor:1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:etrust_ez_armor:2:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:etrust_ez_armor:3:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:etrust_internet_security_suite:1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:etrust_internet_security_suite:2:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:etrust_intrusion_detection:2.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:internet_security_suite:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:secure_content_manager:1.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:secure_content_manager:8.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:threat_manager:8:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11.1:*:*:*:*:*:*:*
• cpe:2.3:a:ca:brightstor_arcserve_backup:11:*:windows:*:*:*:*:*
• cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:*
• cpe:2.3:a:ca:protection_suites:r2:*:*:*:*:*:*:*

More vulnerabilities in Broadcom Anti-spyware

• CVE-2009-0042 — Critical (CVSS 10.0): Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for…

All CVEs affecting Broadcom Anti-spyware →