Multiple Trend Micro Antivirus RAR Archive Remote Denial Of Service Vulnerability

Bugtraq ID:	21509
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2006-5645 CVE-2006-6458
Remote:	Yes
Local:	No
Published:	Dec 09 2006 12:00AM
Updated:	Jul 06 2016 02:40PM
Credit:	Damian Put, Titon and an anonymous researcher are credited with discovering this vulnerability.
Vulnerable:	Trend Micro Server Protect 5.58 Trend Micro PC Cillin - Internet Security 2006 0 Trend Micro Office Scan 7.3
Not Vulnerable:

Multiple Trend Micro Antivirus RAR Archive Remote Denial Of Service Vulnerability

Multiple Trend Micro antivirus applications are prone to a remote denial-of-service vulnerability because the software fails to properly handle certain file types, resulting in the excessive consumption of system resources.

An attacker may exploit this issue to crash affected computers, denying further service to users.

Trend Micro PC Cillin Internet Security 2006, Trend Micro Office Scan 7.3, and Trend Micro Server Protect 5.58 are vulnerable. Other versions may also be affected.

Multiple Trend Micro Antivirus RAR Archive Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Trend Micro Antivirus RAR Archive Remote Denial Of Service Vulnerability

Solution:
The vendor released a fix to address this issue. Please contact the vendor for more information.

Multiple Trend Micro Antivirus RAR Archive Remote Denial Of Service Vulnerability

References:

• Trend Micro Homepage (Trend Micro)
  
• iDefense Security Advisory 12.08.06: Multiple Vendor Antivirus RAR File Denial o (iDefense Labs )