high7.5
CVE-2005-0533
Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute ar…
Impact
Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trend Micro | Client-Server-Messaging Suite Smb | Version gold |
| Trend Micro | Client-Server Suite Smb | Version gold |
| Trend Micro | Control Manager | Versions gold, netware |
| Trend Micro | Interscan Emanager | Versions 3.5, 3.5.2, 3.6, 3.51, 3.51_j |
| Trend Micro | Interscan Messaging Security Suite | Versions 3.81, 5.5, gold |
| Trend Micro | Interscan Viruswall | Versions 3.0.1, 3.4, 3.5, 3.6, 3.6.5, 3.51 |
| Trend Micro | Interscan Web Security Suite | Version gold |
| Trend Micro | Interscan Webmanager | Versions 1.2, 2.0, 2.1 |
| Trend Micro | Interscan Webprotect | Version gold |
| Trend Micro | Officescan | Versions 3.0, corporate_3.0, corporate_3.1.1, corporate_3.5, corporate_3.11, corporate_3.13 |
| Trend Micro | Pc-Cillin | Versions 6.0, 2000, 2002, 2003 |
| Trend Micro | Portalprotect | Version 1.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/14396
- http://securitytracker.com/id?1013289
- http://securitytracker.com/id?1013290
- http://www.securityfocus.com/bid/12643
- http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+VSAPI+ARJ+parsing+could+allow+Remote+Code+execution
- http://xforce.iss.net/xforce/alerts/id/189
- http://secunia.com/advisories/14396
- http://securitytracker.com/id?1013289
- http://securitytracker.com/id?1013290
- http://www.securityfocus.com/bid/12643
- http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+VSAPI+ARJ+parsing+could+allow+Remote+Code+execution
- http://xforce.iss.net/xforce/alerts/id/189