受影响系统：
ComputerAssociatesBrightStorARCserveBackupR11.5
ComputerAssociatesBrightStorARCserveBackupR11.1
ComputerAssociatesBrightStorARCserveBackupr11.0forWindows
ComputerAssociatesBrightStorARCserveBackupr10.5
ComputerAssociatesBrightStorARCserveBackup9.01
ComputerAssociatesAnti-VirusSDK
ComputerAssociatesAnti-VirusGateway7.1
ComputerAssociatesAnti-VirusfortheEnterpriser8.1
ComputerAssociatesAnti-VirusfortheEnterpriser8
ComputerAssociatesAnti-Virus2007(v8)
ComputerAssociatesInternetSecuritySuite2007v3.0
ComputerAssociatesProtectionSuitesr3
ComputerAssociatesProtectionSuitesr2
ComputerAssociateseTrustEZAntivirusr7
ComputerAssociateseTrustEZAntivirusr6.1
ComputerAssociateseTrustInternetSecuritySuiter2
ComputerAssociateseTrustInternetSecuritySuiter1
ComputerAssociateseTrustEZArmorr3.x
ComputerAssociateseTrustEZArmorr2
ComputerAssociateseTrustEZArmorr1
ComputerAssociatesThreatManagerfortheEnterpriser8
ComputerAssociatesSecureContentManager8.0
ComputerAssociatesUnicenterNSMr3.1
ComputerAssociatesUnicenterNSMr3.0
ComputerAssociatesUnicenterNSMr11.1
ComputerAssociatesUnicenterNSMr11
描述：
ComputerAssociates安全厂商产品包括多种杀毒软件及备份恢复系统。
多个CA产品的杀毒引擎在解析包含畸形字段的.CAB文档时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制系统。
如果.CAB文档中包含有超长coffFiles字段的话，就可能在解析此文档时触发这个溢出，导致执行任意指令。
厂商补丁：
ComputerAssociates
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://www.cai.com/
网友评论