Trend Micro Antivirus UPX Compressed PE File Buffer Overflow Vulnerability

Bugtraq ID:	22449
Class:	Boundary Condition Error
CVE:	CVE-2007-0851
Remote:	Yes
Local:	No
Published:	Feb 07 2007 12:00AM
Updated:	Mar 19 2015 08:34AM
Credit:	An anonymous researcher is credited with discovering this issue.
Vulnerable:	Trend Micro WebProtect 3.1 Trend Micro Web Security Suite 1.2 Trend Micro Viruswall 3.0.1 Trend Micro ServerProtect for Windows 5.58 Trend Micro ServerProtect for Windows Trend Micro ServerProtect for Novell Netware Trend Micro ServerProtect for Linux 1.2 Trend Micro ServerProtect for Linux Trend Micro ServerProtect 5.5.8 Trend Micro ServerProtect 5.3.1 Trend Micro Server Protect 5.58 Trend Micro Scanning Engine 7.1 Trend Micro ScanMail for Microsoft Exchange 6.1 Trend Micro ScanMail for Microsoft Exchange 3.81 Trend Micro ScanMail for Microsoft Exchange 3.8 Trend Micro ScanMail for Lotus Domino on Windows Trend Micro ScanMail for Lotus Domino on Solaris Trend Micro ScanMail for Lotus Domino on S/390 Trend Micro ScanMail for Lotus Domino on AS/400 Trend Micro ScanMail for Lotus Domino on AIX Trend Micro ScanMail for Domino 2.51 Trend Micro ScanMail for Domino 2.6 Trend Micro ScanMail eManager Trend Micro ScanMail 1.0 Trend Micro PortalProtect for Sharepoint 1.2 Trend Micro PortalProtect 1.0 Trend Micro PC-Cillin Internet Security 2006 14.10 .1023 Trend Micro PC-Cillin Internet Security 2005 12.0 0 build 1244 Trend Micro PC-Cillin Internet Security 14 14.0.1485 Trend Micro PC-Cillin Internet Security 2007 Trend Micro PC-cillin 6.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Trend Micro PC-cillin 2005 Trend Micro PC-cillin 2003 Trend Micro PC-cillin 2002 Trend Micro PC-cillin 2000 Trend Micro PC-cillin 2006 Trend Micro PC Cillin - Internet Security 2006 0 Trend Micro OfficeScan For Microsoft SBS 4.5 - Microsoft Windows NT 4.0 Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.13 - Microsoft Windows NT 4.0 Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.11 - Microsoft Windows NT 4.0 Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.5 Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.1.1 Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.0 Trend Micro OfficeScan Corporate Edition 7.0 Trend Micro OfficeScan Corporate Edition 6.5 Trend Micro OfficeScan Corporate Edition 5.58 Trend Micro OfficeScan Corporate Edition 5.5 Trend Micro OfficeScan Corporate Edition 5.0 2 Trend Micro OfficeScan Corporate Edition 3.54 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Novell Netware 5.1 - Novell Netware 5.0 - Novell Netware 4.11 - Novell Netware 4.1 - Novell Netware 3.1.2 Trend Micro OfficeScan Corporate Edition 3.13 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 3.11 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 3.5 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 3.0 Trend Micro OfficeScan Corporate Edition 7.3 Trend Micro Office Scan 7.3 Trend Micro InterScan WebSecuritySuite for Linux 1.0 ja Trend Micro InterScan WebSecuritySuite for Linux Trend Micro InterScan WebProtect for ISA Trend Micro InterScan WebManager 2.1 Trend Micro InterScan WebManager 2.0 Trend Micro InterScan WebManager 1.2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT Server 4.0 Trend Micro InterScan Web Security Suite for Windows Trend Micro InterScan Web Security Suite for Solaris Trend Micro InterScan Web Security Suite for Linux Trend Micro InterScan VirusWall Scan Engine 7.510 -1002 Trend Micro InterScan VirusWall for Windows NT 5.1 Trend Micro InterScan VirusWall for Windows NT 3.52 build 1466 Trend Micro InterScan VirusWall for Windows NT 3.52 - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP5 - Microsoft Windows NT Terminal Server 4.0 SP4 - Microsoft Windows NT Terminal Server 4.0 SP3 - Microsoft Windows NT Terminal Server 4.0 SP2 - Microsoft Windows NT Terminal Server 4.0 SP1 - Microsoft Windows NT Terminal Server 4.0 alpha - Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 Trend Micro InterScan VirusWall for Windows NT 3.51 - Microsoft Windows NT 3.5.1 SP5 - Microsoft Windows NT 3.5.1 SP4 - Microsoft Windows NT 3.5.1 SP3 - Microsoft Windows NT 3.5.1 SP2 - Microsoft Windows NT 3.5.1 SP1 - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 3.5 Trend Micro InterScan VirusWall for Windows NT 3.6 Trend Micro InterScan VirusWall for Windows NT 3.5 - Microsoft Windows NT 3.5.1 SP5 - Microsoft Windows NT 3.5.1 SP4 - Microsoft Windows NT 3.5.1 SP3 - Microsoft Windows NT 3.5.1 SP2 - Microsoft Windows NT 3.5.1 SP1 - Microsoft Windows NT 3.5 Trend Micro InterScan VirusWall for Windows NT 3.4 - Microsoft Windows NT 4.0 Trend Micro InterScan VirusWall for Windows Trend Micro InterScan VirusWall for Unix 3.6 x Trend Micro InterScan VirusWall for Unix 3.0.1 Trend Micro InterScan VirusWall for SMB Windows NT Trend Micro InterScan VirusWall for SMB Linux Trend Micro InterScan VirusWall for SMB Trend Micro InterScan VirusWall for AIX Trend Micro Interscan Viruswall (Solaris) 3.6 Trend Micro Interscan Viruswall (Linux) 3.6 Trend Micro Interscan Viruswall (Linux) 3.1 Trend Micro Interscan Viruswall (Linux) 3.0.1 Trend Micro Interscan Viruswall (Linux) 3.81 Trend Micro Interscan Viruswall (HP-UX) 3.6 Trend Micro InterScan VirusWall 3.52 Trend Micro InterScan VirusWall 3.32 - Microsoft Windows NT 4.0 Trend Micro InterScan VirusWall 3.8 Build 1130 Trend Micro InterScan VirusWall 3.7 Build 1190 Trend Micro InterScan VirusWall 3.7 Trend Micro InterScan VirusWall 3.6 Build 1182 Trend Micro InterScan VirusWall 3.6 Build 1166 Trend Micro InterScan VirusWall 3.6 Trend Micro InterScan VirusWall 3.3 - Microsoft Windows NT 4.0 Trend Micro InterScan VirusWall 3.2.3 - Microsoft Windows NT 4.0 Trend Micro InterScan VirusWall 3.0.1 Trend Micro InterScan Messaging Security Suite for Windows Trend Micro InterScan Messaging Security Suite for Solaris Trend Micro InterScan Messaging Security Suite for Linux 5.1.1 Trend Micro InterScan Messaging Security Suite for Linux Trend Micro InterScan Messaging Security Suite 5.5 .1183 Trend Micro InterScan Messaging Security Suite 5.5 Trend Micro InterScan Messaging Security Suite 3.81 Trend Micro InterScan eManager 3.51 j - Trend Micro InterScan VirusWall 3.32 - Trend Micro InterScan VirusWall 3.3 - Trend Micro InterScan VirusWall 3.2.3 - Trend Micro InterScan VirusWall 3.0.1 - Trend Micro InterScan VirusWall for Windows NT 3.51 - Trend Micro InterScan VirusWall for Windows NT 3.5 - Trend Micro InterScan VirusWall for Windows NT 3.4 Trend Micro InterScan eManager 3.51 - Trend Micro InterScan VirusWall 3.32 - Trend Micro InterScan VirusWall 3.3 - Trend Micro InterScan VirusWall 3.2.3 - Trend Micro InterScan VirusWall 3.0.1 - Trend Micro InterScan VirusWall for Windows NT 3.51 - Trend Micro InterScan VirusWall for Windows NT 3.5 - Trend Micro InterScan VirusWall for Windows NT 3.4 Trend Micro InterScan eManager 3.6 For Sun - Sun Solaris 2.6_sparc Trend Micro InterScan eManager 3.6 For Linux Trend Micro InterScan eManager 3.5.2 For Windows - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 Trend Micro InterScan eManager 3.5 For HP Trend Micro Control Manager 2.5 Trend Micro Control Manager Windows Trend Micro Control Manager Win NT/2000 Trend Micro Control Manager Solaris Trend Micro Control Manager S/390 Trend Micro Control Manager NetWare Trend Micro Control Manager AS/400 Trend Micro Control Manager 3.5 Trend Micro Client/Server/Messaging Suite for SMB for Windows Trend Micro Client/Server Suite for SMB for Windows Cyber Clean Center CCC Cleaner 1.0
Not Vulnerable:	Cyber Clean Center CCC Cleaner 1.0.V253

Trend Micro Antivirus UPX Compressed PE File Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Trend Micro Antivirus UPX Compressed PE File Buffer Overflow Vulnerability

Solution:
The vendor released an advisory and a fix to address this issue. Please see the references for details.