Vulnerability in Trend Micro Client-Server-Messaging Suite SMB
CVE-2005-0533
Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure.
EPSS: 0.044 (90.8th percentile) — read the EPSS interpretation.
Affected products
- Trend_micro Client-server-messaging_suite_smb — versions gold
- Trend_micro Client-server_suite_smb — versions gold
- Trend_micro Control_manager — versions gold, netware
- Trend_micro Interscan_emanager — versions 3.5, 3.5.2, 3.6
- Trend_micro Interscan_messaging_security_suite — versions 3.81, 5.5, gold
- Trend_micro Interscan_viruswall — versions 3.0.1, 3.4, 3.5
- Trend_micro Interscan_webmanager — versions 1.2, 2.0, 2.1
- Trend_micro Interscan_webprotect — versions gold
- Trend_micro Interscan_web_security_suite — versions gold
- Trend_micro Officescan — versions 3.0, corporate_3.0, corporate_3.1.1
References
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
- cve@mitre.org (x_refsource_ISS, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)