Vulnerability in Trend Micro Interscan Viruswall
CVE-2002-0637
InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having (or missing) space characters in unexpected places (aka "space gap"), such as (1) Content-Type :", (2) "Content-Transfer-Encoding :", (3) no space before a boundary declaration, or (4) "boundary= ", which is processed by Outlook Express.
EPSS: 0.057 (92.6th percentile) — read the EPSS interpretation.
Affected products
- Trend_micro Interscan_viruswall — versions 3.52
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2002-0637?
- CVE-2002-0637 is a vulnerability in Trend Micro Interscan Viruswall. Published 2002-07-11.
- Is CVE-2002-0637 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.