CVE-2021-25252

Trend Micro's Virus Scan API VSAPI and Advanced Threat Scan Engine ATSE - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file...

Memory corruption

Trend Micro's Virus Scan API VSAPI and Advanced Threat Scan Engine ATSE - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file...

CVE-2008-5545

Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension...

CVE-2008-5545

Concrete details found: CVE-2008-5545 is linked to a historic bypass of malware detection in HTML documents by inserting an MZ header (EXE info) at the start and renaming to no extension, .txt, or .jpg. Connected entries show affected products across multiple security suites (e.g., Trend Micro VS...

Buffer overflow in VSAPI library of Trend Micro VirusWall 3.81 for Linux

I - TITLE Security advisory: Buffer overflow in VSAPI library of Trend Micro VirusWall 3.81 for Linux II - SUMMARY Description: Local buffer overflow vulnerability in VSAPI library allows arbitrary code execution and leads to privilege escalation Author: Sebastian Wolfgarten sebastian at wolfgart...

Trend Micro VirusWall VSAPI库本地命令行参数缓冲区溢出漏洞

Trend Micro VirusWall是一款软件的网关防火墙解决方案。 VirusWall 3.81 for Linux产品中所捆绑的libvsapi.so库存在缓冲区溢出，本地攻击者可能利用此漏洞获取root用户权限。 如果能向使用该库的应用程序发送超长的命令行参数的话，就可以触发溢出，导致执行任意代码。这种应用程序的一个示例是vscan。由于vscan默认下设置了set suid root权限，因此攻击者可以利用这个漏洞获得root用户权限。 Trend Micro Interscan Viruswall Linux 3.81...

CVE-2005-0533

CVE-2005-0533: Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI prior to 7.510, used across multiple Trend Micro products. An overly long ARJ header file name can overrun a buffer in the ARJ parsing path, enabling remote code execution when a crafted ARJ archive is scanned. Affec...