Trend Micro Scan Engine UPX文件解析远程拒绝服务漏洞

2007-03-17T00:00:00
ID SSV:1495
Type seebug
Reporter Root
Modified 2007-03-17T00:00:00

Description

Trend Micro Antivirus是一款流行的反病毒解决方案。

Trend Micro Antivirus处理UPX文件存在除零错误,远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。

问题存在于内核驱动VsapiNT.sys中,驱动负责扫描各种文件格式中的恶意内容,解析UPX文件时获取攻击者提供文件中的整数值,结果恶意的UPX文件可导致内核模式中除零错误导致蓝屏。

Trend Micro Scan Engine 8.3 Trend Micro Scan Engine 8 Trend Micro PC-Cillin Internet Security 2006 14.10 .1023 Trend Micro PC-Cillin Internet Security 2007 Trend Micro Internet Security Suite 2007 0 Trend Micro Antivirus 2007

Trend Micro Antivirus 2007

* Trend Micro OPR 4.335.00
  <a href="ftp://download.trendmicro.com/products/pattern/lpt335.zip" target="_blank">ftp://download.trendmicro.com/products/pattern/lpt335.zip</a>

Trend Micro Scan Engine 8.3

* Trend Micro OPR 4.335.00
  <a href="ftp://download.trendmicro.com/products/pattern/lpt335.zip" target="_blank">ftp://download.trendmicro.com/products/pattern/lpt335.zip</a>

Trend Micro PC-Cillin Internet Security 2007

* Trend Micro OPR 4.335.00
  <a href="ftp://download.trendmicro.com/products/pattern/lpt335.zip" target="_blank">ftp://download.trendmicro.com/products/pattern/lpt335.zip</a>

Trend Micro Scan Engine 8

* Trend Micro OPR 4.335.00
  <a href="ftp://download.trendmicro.com/products/pattern/lpt335.zip" target="_blank">ftp://download.trendmicro.com/products/pattern/lpt335.zip</a>

Trend Micro PC-Cillin Internet Security 2006 14.10 .1023

* Trend Micro OPR 4.335.00
  <a href="ftp://download.trendmicro.com/products/pattern/lpt335.zip" target="_blank">ftp://download.trendmicro.com/products/pattern/lpt335.zip</a>