An attacker could use a corrupted UPX (Ultimate Packer for Executables) file to cause a buffer overflow via the flaw. Trend Micro has released an update that fixes the vulnerability.
Successful exploitation can cause a DoS attack or allow an attacker to assume remote control of an affected system, according to a Trend Micro advisory.
The flaw exists in all Trend Micro products and versions using the Scan Engine and Pattern File, according to the company.
Secunia said in an alert updated today that the flaw is "highly critical," which means it can be exploited from a remote location.
Click here to email Online Editor Frank Washkuch Jr.
Trend Micro updates to fix Scan Engine vulnerability
Trend Micro has confirmed a vulnerability in its Scan Engine application that could be exploited by malicious users to take control of an affected system.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
The AI era demands a new kind of network
.jpg&h=140&w=231&c=1&s=0)
Partner Content
From data overload to decisive action – accelerating decisions with AI agents
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Australian mid-market businesses to access deeper AI and security expertise with First Focus-Integris partnership
Promoted Content
How David Jones, Canva and others are putting agentic AI to work
iTnews Resilience, Rewired Breakfast
RIMPA Live Convention 2026
What’s Next?
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
.jpg&h=140&w=231&c=1&s=0)
.jpg&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
.jpg&h=236&w=349&c=1&s=1)
