ID

VAR-200712-0504


TITLE

Multiple Trend Micro Products UUE Malformed Zip File Buffer Overflow Vulnerability

Trust: 0.3

sources: BID: 26818

DESCRIPTION

Multiple Trend Micro products are prone to a buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Given the nature of this issue, the attacker may also be able to execute arbitrary code, but this has not been confirmed.

Trust: 0.3

sources: BID: 26818

AFFECTED PRODUCTS

vendor:trend micromodel:internet security proscope:eqversion:2008

Trust: 0.3

vendor:trend micromodel:internet securityscope:eqversion:2008

Trust: 0.3

vendor:trend micromodel:antivirus plus antispywarescope:eqversion:2008

Trust: 0.3

sources: BID: 26818

THREAT TYPE

network

Trust: 0.3

sources: BID: 26818

TYPE

Boundary Condition Error

Trust: 0.3

sources: BID: 26818

EXTERNAL IDS

db:BIDid:26818

Trust: 0.3

sources: BID: 26818

REFERENCES

url:http://www.trend.com

Trust: 0.3

url:http://esupport.trendmicro.com/support/viewxml.do?contentid=1036464

Trust: 0.3

sources: BID: 26818

CREDITS

Sowhat of Nevis Labs is credited with discovering this issue.

Trust: 0.3

sources: BID: 26818

SOURCES

db:BIDid:26818

LAST UPDATE DATE

2022-05-17T01:51:59.857000+00:00


SOURCES UPDATE DATE

db:BIDid:26818date:2007-12-12T18:52:00

SOURCES RELEASE DATE

db:BIDid:26818date:2007-12-11T00:00:00