Vulnerability in Trend Micro Officescan
CVE-2006-6458
The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security 2006, Office Scan 7.3, and Server Protect 5.58, allows remote attackers to cause a denial of service (CPU consumption and system hang) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero, which triggers an infinite loop.
EPSS: 0.027 (85.0th percentile) — read the EPSS interpretation.
Affected products
- Trend_micro Officescan — versions 7.3
- Trend_micro Pc_cillin_-_internet_security_2006
- Trend_micro Serverprotect — versions 5.58
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_IDEFENSE, third-party-advisory)