受影响系统：ComputerAssociatesBrightStorARCserveBackupR11.5ComputerAssociatesBrightStorARCserveBackupR11.1ComputerAssociatesBrightStorARCserveBackupr11.0forWindowsComputerAssociatesBrightStorARCserveBackupr10.5ComputerAssociatesBrightStorARCserveBackup9.01ComputerAssociatesAnti-VirusSDKComputerAssociatesAnti-VirusGateway7.1ComputerAssociatesAnti-VirusfortheEnterpriser8.1ComputerAssociatesAnti-VirusfortheEnterpriser8ComputerAssociatesAnti-Virus2007(v8)ComputerAssociatesInternetSecuritySuite2007v3.0ComputerAssociatesProtectionSuitesr3ComputerAssociatesProtectionSuitesr2ComputerAssociateseTrustEZAntivirusr7ComputerAssociateseTrustEZAntivirusr6.1ComputerAssociateseTrustInternetSecuritySuiter2ComputerAssociateseTrustInternetSecuritySuiter1ComputerAssociateseTrustEZArmorr3.xComputerAssociateseTrustEZArmorr2ComputerAssociateseTrustEZArmorr1ComputerAssociatesThreatManagerfortheEnterpriser8ComputerAssociatesSecureContentManager8.0ComputerAssociatesUnicenterNSMr3.1ComputerAssociatesUnicenterNSMr3.0ComputerAssociatesUnicenterNSMr11.1ComputerAssociatesUnicenterNSMr11
描述：ComputerAssociates安全厂商产品包括多种杀毒软件及备份恢复系统。
多个CA产品的杀毒引擎在解析包含畸形字段的.CAB文档时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制系统。
如果.CAB文档中包含有超长coffFiles字段的话，就可能在解析此文档时触发这个溢出，导致执行任意指令。
厂商补丁：ComputerAssociates目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：http://www.cai.com/
