An attacker could use a corrupted UPX (Ultimate Packer for Executables) file to cause a buffer overflow via the flaw. Trend Micro has released an update that fixes the vulnerability.
Successful exploitation can cause a DoS attack or allow an attacker to assume remote control of an affected system, according to a Trend Micro advisory.
The flaw exists in all Trend Micro products and versions using the Scan Engine and Pattern File, according to the company.
Secunia said in an alert updated today that the flaw is "highly critical," which means it can be exploited from a remote location.
Click here to email Online Editor Frank Washkuch Jr.
Trend Micro updates to fix Scan Engine vulnerability
By
Frank Washkuch
on
Feb 9, 2007 7:00PM
Trend Micro has confirmed a vulnerability in its Scan Engine application that could be exploited by malicious users to take control of an affected system.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
Teaching tech teams every step of implementing a machine learning project
Promoted Content
Security "mindset shift" needed to protect organisations
Promoted Content
Security through visibility: supporting Essential Eight cyber mitigation strategies
Promoted Content
DoT Victoria turns to Oracle to implement unified cloud-based platform
Sponsored Whitepapers
Planning before the breach: You can’t protect what you can’t see
Beyond FTP: Securing and Managing File Transfers
NextGen Security Operations: A Roadmap for the Future
Video: Watch Juniper talk about its Aston Martin partnership
Don’t pay the ransom: A three-step guide to ransomware protection
