Multiple Trend Micro Products UUE Malformed Zip File Buffer Overflow Vulnerability
BID:26818
Info
Multiple Trend Micro Products UUE Malformed Zip File Buffer Overflow Vulnerability
| Bugtraq ID: | 26818 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Dec 11 2007 12:00AM |
| Updated: | Dec 12 2007 06:52PM |
| Credit: | Sowhat of Nevis Labs is credited with discovering this issue. |
| Vulnerable: |
Trend Micro Internet Security Pro 2008 Trend Micro Internet Security 2008 Trend Micro AntiVirus plus AntiSpyware 2008 |
| Not Vulnerable: | |
Discussion
Multiple Trend Micro Products UUE Malformed Zip File Buffer Overflow Vulnerability
Multiple Trend Micro products are prone to a buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Given the nature of this issue, the attacker may also be able to execute arbitrary code, but this has not been confirmed.
Multiple Trend Micro products are prone to a buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Given the nature of this issue, the attacker may also be able to execute arbitrary code, but this has not been confirmed.
Exploit / POC
Multiple Trend Micro Products UUE Malformed Zip File Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple Trend Micro Products UUE Malformed Zip File Buffer Overflow Vulnerability
Solution:
The vendor released an update to address this issue. Please see the references for more information.
Trend Micro Internet Security 2008
Trend Micro Internet Security Pro 2008
Trend Micro AntiVirus plus AntiSpyware 2008
Solution:
The vendor released an update to address this issue. Please see the references for more information.
Trend Micro Internet Security 2008
-
Trend Micro tis_160_win_en_patch_pccscan1451.exe
javascript:openRelatedLink('http://solutionfile.trendmicro.com/solutio nfile/1036464/EN/tis_160_win_en_patch_pccscan1451.exe')
Trend Micro Internet Security Pro 2008
-
Trend Micro tis_160_win_en_patch_pccscan1451.exe
javascript:openRelatedLink('http://solutionfile.trendmicro.com/solutio nfile/1036464/EN/tis_160_win_en_patch_pccscan1451.exe')
Trend Micro AntiVirus plus AntiSpyware 2008
-
Trend Micro tis_160_win_en_patch_pccscan1451.exe
javascript:openRelatedLink('http://solutionfile.trendmicro.com/solutio nfile/1036464/EN/tis_160_win_en_patch_pccscan1451.exe')
References
Multiple Trend Micro Products UUE Malformed Zip File Buffer Overflow Vulnerability
References:
References:
- Trend Micro Homepage (Trend Micro)
- [Vulnerability Closure] Trend Micro Antivirus plus AntiSpyware 2008 UUE Decoding (Trend Micro)