OSVDB ID: 33038

Title: Trend Micro Multiple Products UPX Handling Overflow

Info

Disclosure

Feb 08, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Private
OSVDB: Security Software

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Trend Micro has released a patch to address this vulnerability.

Products

Unknown or Incomplete

References

Security Tracker: 1017601 1017602 1017603
CVE ID: 2007-0851 (see also: NVD)
Bugtraq ID: 22449
Secunia Advisory ID: 24087 24128
CERT VU: 276432
SCIP VulDB ID: 2906
ISS X-Force ID: 32352
VUPEN Advisory: ADV-2007-0522
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-02/0091.html
Vendor Specific Advisory URL: http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289
Other Advisory URL: http://jvn.jp/jp/JVN%2377366274/index.html
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470
http://www.jpcert.or.jp/at/2007/at070004.txt
News Article: http://www.eweek.com/article2/0,1895,2092841,00.asp

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/33038