medium5.5
CVE-2021-25252
Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-se…
Impact
Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Apex Central | Version 2019 |
| Trendmicro | Apex One | All versions Version 2019 |
| Trendmicro | Cloud Edge | Version 5.0 |
| Trendmicro | Deep Security | Versions 10.0, 11.0, 12.0, 20.0 |
| Trendmicro | Control Manager | Version 7.0 |
| Trendmicro | Deep Discovery Analyzer | Version 5.1 |
| Trendmicro | Deep Discovery Email Inspector | Version 2.5 |
| Trendmicro | Deep Discovery Inspector | Version 3.8 |
| Trendmicro | Interscan Messaging Security Virtual Appliance | Version 9.1 |
| Trendmicro | Interscan Web Security Virtual Appliance | Version 6.5 |
| Trendmicro | Officescan | All versions |
| Trendmicro | Portal Protect | Version 2.6 |