• Product Information
• Security Products Overview
• Juniper Networks ISG Series
• IDP Demo
• Product Poster & Z-Card 

Title: Trend Micro Antivirus UPX Compressed PE File Buffer Overflow Vulnerability

Severity: CRITICAL

Description:

Trend Micro Antivirus is an antivirus application for Windows and UNIX-like operating systems.

Trend Micro Antivirus is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

This issue presents itself when the application processes a specially crafted and UPX-compressed executable. Further technical information is currently unavailable. This BID will be updated when more information becomes available.

Successsful exploits will result in attacker-supplied arbitrary code running with elevated privileges, resulting in the complete compromise of affected computers. Failed exploit attempts will likely cause denial-of-service conditions.

This issue affects all Trend Micro products and versions using the Scan Engine and Pattern File technology.

Affected Products:

• Cyber Clean Center CCC Cleaner 1.0
• Trend Micro Client/Server Suite for SMB for Windows
• Trend Micro Client/Server/Messaging Suite for SMB for Windows
• Trend Micro Control Manager 2.5.0
• Trend Micro Control Manager 3.5
• Trend Micro Control Manager AS/400
• Trend Micro Control Manager NetWare
• Trend Micro Control Manager S/390
• Trend Micro Control Manager Solaris
• Trend Micro Control Manager Win NT/2000
• Trend Micro Control Manager Windows
• Trend Micro InterScan Messaging Security Suite 3.81.0
• Trend Micro InterScan Messaging Security Suite 5.5.0
• Trend Micro InterScan Messaging Security Suite 5.5.0 .1183
• Trend Micro InterScan Messaging Security Suite for Linux
• Trend Micro InterScan Messaging Security Suite for Linux 5.1.1
• Trend Micro InterScan Messaging Security Suite for Solaris
• Trend Micro InterScan Messaging Security Suite for Windows
• Trend Micro InterScan VirusWall 3.0.1
• Trend Micro InterScan VirusWall 3.2.3
• Trend Micro InterScan VirusWall 3.3.0
• Trend Micro InterScan VirusWall 3.32.0
• Trend Micro InterScan VirusWall 3.52.0
• Trend Micro InterScan VirusWall 3.6.0
• Trend Micro InterScan VirusWall 3.6.0 Build 1166
• Trend Micro InterScan VirusWall 3.6.0 Build 1182
• Trend Micro InterScan VirusWall 3.7.0
• Trend Micro InterScan VirusWall 3.7.0 Build 1190
• Trend Micro InterScan VirusWall 3.8.0 Build 1130
• Trend Micro InterScan VirusWall Scan Engine 7.510.0 -1002
• Trend Micro InterScan VirusWall for AIX
• Trend Micro InterScan VirusWall for SMB
• Trend Micro InterScan VirusWall for SMB Linux
• Trend Micro InterScan VirusWall for SMB Windows NT
• Trend Micro InterScan VirusWall for Unix 3.0.1
• Trend Micro InterScan VirusWall for Unix 3.6.0 x
• Trend Micro InterScan VirusWall for Windows
• Trend Micro InterScan VirusWall for Windows NT 3.4.0
• Trend Micro InterScan VirusWall for Windows NT 3.5.0
• Trend Micro InterScan VirusWall for Windows NT 3.51.0
• Trend Micro InterScan VirusWall for Windows NT 3.52.0
• Trend Micro InterScan VirusWall for Windows NT 3.52.0 build 1466
• Trend Micro InterScan VirusWall for Windows NT 3.6.0
• Trend Micro InterScan VirusWall for Windows NT 5.1.0
• Trend Micro InterScan Web Security Suite for Linux
• Trend Micro InterScan Web Security Suite for Solaris
• Trend Micro InterScan Web Security Suite for Windows
• Trend Micro InterScan WebManager 1.2.0
• Trend Micro InterScan WebManager 1.2.0
• Trend Micro InterScan WebManager 2.0.0
• Trend Micro InterScan WebManager 2.1.0
• Trend Micro InterScan WebProtect for ISA
• Trend Micro InterScan WebSecuritySuite for Linux
• Trend Micro InterScan WebSecuritySuite for Linux
• Trend Micro InterScan WebSecuritySuite for Linux
• Trend Micro InterScan WebSecuritySuite for Linux 1.0.0 ja
• Trend Micro InterScan eManager 3.5.0 For HP
• Trend Micro InterScan eManager 3.5.2 For Windows
• Trend Micro InterScan eManager 3.51.0
• Trend Micro InterScan eManager 3.51.0 j
• Trend Micro InterScan eManager 3.6.0 For Linux
• Trend Micro InterScan eManager 3.6.0 For Sun
• Trend Micro Interscan Viruswall (HP-UX) 3.6.0
• Trend Micro Interscan Viruswall (Linux) 3.0.1
• Trend Micro Interscan Viruswall (Linux) 3.1.0
• Trend Micro Interscan Viruswall (Linux) 3.6.0
• Trend Micro Interscan Viruswall (Linux) 3.81
• Trend Micro Interscan Viruswall (Solaris) 3.6.0
• Trend Micro Office Scan 7.3
• Trend Micro OfficeScan Corporate Edition 3.0.0
• Trend Micro OfficeScan Corporate Edition 3.11.0
• Trend Micro OfficeScan Corporate Edition 3.13.0
• Trend Micro OfficeScan Corporate Edition 3.5.0
• Trend Micro OfficeScan Corporate Edition 3.54.0
• Trend Micro OfficeScan Corporate Edition 5.0.0 2
• Trend Micro OfficeScan Corporate Edition 5.5.0
• Trend Micro OfficeScan Corporate Edition 5.58.0
• Trend Micro OfficeScan Corporate Edition 6.5.0
• Trend Micro OfficeScan Corporate Edition 7.0.0
• Trend Micro OfficeScan Corporate Edition 7.3
• Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.0.0
• Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.1.1
• Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.11.0
• Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.13.0
• Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.5.0
• Trend Micro OfficeScan For Microsoft SBS 4.5.0
• Trend Micro PC Cillin - Internet Security 2006
• Trend Micro PC-Cillin Internet Security 14 14.00.1485
• Trend Micro PC-Cillin Internet Security 2005 12.0.0 0 build 1244
• Trend Micro PC-Cillin Internet Security 2006 14.10.0 .1023
• Trend Micro PC-Cillin Internet Security 2007
• Trend Micro PC-cillin 2006
• Trend Micro PC-cillin 0.0.02000
• Trend Micro PC-cillin 0.0.02002
• Trend Micro PC-cillin 0.0.02003
• Trend Micro PC-cillin 2005
• Trend Micro PC-cillin 6.0.0
• Trend Micro PortalProtect 1.0.0
• Trend Micro PortalProtect for Sharepoint 1.2
• Trend Micro ScanMail 1.0.0
• Trend Micro ScanMail eManager
• Trend Micro ScanMail for Domino 2.51.0
• Trend Micro ScanMail for Domino 2.6.0
• Trend Micro ScanMail for Lotus Domino on AIX
• Trend Micro ScanMail for Lotus Domino on AS/400
• Trend Micro ScanMail for Lotus Domino on S/390
• Trend Micro ScanMail for Lotus Domino on Solaris
• Trend Micro ScanMail for Lotus Domino on Windows
• Trend Micro ScanMail for Microsoft Exchange 3.8.0
• Trend Micro ScanMail for Microsoft Exchange 3.81.0
• Trend Micro ScanMail for Microsoft Exchange 6.1.0
• Trend Micro Scanning Engine 7.1.0
• Trend Micro Server Protect 5.58
• Trend Micro ServerProtect 5.3.1
• Trend Micro ServerProtect 5.5.8
• Trend Micro ServerProtect for Linux
• Trend Micro ServerProtect for Linux 1.2.0
• Trend Micro ServerProtect for Novell Netware
• Trend Micro ServerProtect for Windows
• Trend Micro ServerProtect for Windows 5.58
• Trend Micro Viruswall 3.0.1
• Trend Micro Web Security Suite 1.2.0
• Trend Micro WebProtect 3.1.0

References:

• CCC Cleaner: CCC Cleaner Update version 253
• Trend Micro: Trend Micro Homepage
• Trend Micro: [Vulnerability Confirmation] Antivirus UPX Parsing Kernel Buffer Overflow Vulner
• US-CERT: Vulnerability Note VU#276432 - Trend Micro AntiVirus fails to properly process m
• iDefense Labs: iDefense advisory: Trend Micro AntiVirus UPX Parsing Kernel Buffer Overflow Vuln

Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.