7.5

CVE-2005-0533

Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Trend Micro ≫ Client-server-messaging Suite Smb Version gold Edition windows
Trend Micro ≫ Client-server Suite Smb Version gold Edition windows
Trend Micro ≫ Control Manager Version gold Edition as_400
Trend Micro ≫ Control Manager Version gold Edition s_390
Trend Micro ≫ Control Manager Version gold Edition solaris
Trend Micro ≫ Control Manager Version gold Edition windows
Trend Micro ≫ Control Manager Version gold Edition windows_nt
Trend Micro ≫ Control Manager Version netware
Trend Micro ≫ Interscan Emanager Version 3.5 Edition hp
Trend Micro ≫ Interscan Emanager Version 3.5.2 Edition windows
Trend Micro ≫ Interscan Emanager Version 3.6 Edition linux
Trend Micro ≫ Interscan Emanager Version 3.6 Edition sun
Trend Micro ≫ Interscan Emanager Version 3.51
Trend Micro ≫ Interscan Emanager Version 3.51_j
Trend Micro ≫ Interscan Messaging Security Suite Version gold Edition linux
Trend Micro ≫ Interscan Messaging Security Suite Version gold Edition solaris
Trend Micro ≫ Interscan Messaging Security Suite Version gold Edition windows
Trend Micro ≫ Interscan Viruswall Version 3.0.1 Edition linux
Trend Micro ≫ Interscan Viruswall Version 3.0.1 Edition unix
Trend Micro ≫ Interscan Viruswall Version 3.4 Edition windows_nt
Trend Micro ≫ Interscan Viruswall Version 3.5 Edition windows_nt
Trend Micro ≫ Interscan Viruswall Version 3.6 Edition hp_ux
Trend Micro ≫ Interscan Viruswall Version 3.6 Edition solaris
Trend Micro ≫ Interscan Viruswall Version 3.6 Edition unix
Trend Micro ≫ Interscan Viruswall Version 3.6 Edition windows_nt
Trend Micro ≫ Interscan Viruswall Version 3.6.5 Edition linux
Trend Micro ≫ Interscan Viruswall Version 3.51 Edition windows_nt
Trend Micro ≫ Interscan Viruswall Version 3.52 Edition windows_nt
Trend Micro ≫ Interscan Viruswall Version 3.52_build1466 Edition windows_nt
Trend Micro ≫ Interscan Viruswall Version 5.1 Edition windows_nt
Trend Micro ≫ Interscan Viruswall Version gold Edition aix
Trend Micro ≫ Interscan Viruswall Version gold Edition linux_for_smb
Trend Micro ≫ Interscan Viruswall Version gold Edition smb
Trend Micro ≫ Interscan Viruswall Version gold Edition windows
Trend Micro ≫ Interscan Viruswall Version gold Edition windows_nt_for_smb
Trend Micro ≫ Interscan Web Security Suite Version gold Edition linux
Trend Micro ≫ Interscan Web Security Suite Version gold Edition solaris
Trend Micro ≫ Interscan Web Security Suite Version gold Edition windows
Trend Micro ≫ Interscan Webprotect Version gold Edition isa
Trend Micro ≫ Officescan Version 3.0 Edition corporate
Trend Micro ≫ Officescan Version corporate_3.0 Edition windows_nt_server
Trend Micro ≫ Officescan Version corporate_3.1.1 Edition windows_nt_server
Trend Micro ≫ Officescan Version corporate_3.5
Trend Micro ≫ Officescan Version corporate_3.5 Edition windows_nt_server
Trend Micro ≫ Officescan Version corporate_3.11
Trend Micro ≫ Officescan Version corporate_3.11 Edition windows_nt_server
Trend Micro ≫ Officescan Version corporate_3.13
Trend Micro ≫ Officescan Version corporate_3.13 Edition windows_nt_server
Trend Micro ≫ Officescan Version corporate_3.54
Trend Micro ≫ Officescan Version corporate_5.02
Trend Micro ≫ Officescan Version corporate_5.5
Trend Micro ≫ Officescan Version corporate_5.58
Trend Micro ≫ Officescan Version corporate_6.5
Trend Micro ≫ Pc-cillin Version 6.0
Trend Micro ≫ Pc-cillin Version 2000
Trend Micro ≫ Pc-cillin Version 2002
Trend Micro ≫ Pc-cillin Version 2003
Trend Micro ≫ Portalprotect Version 1.0
Trend Micro ≫ Scanmail Version 2.6 Edition domino
Trend Micro ≫ Scanmail Version 2.51 Edition domino
Trend Micro ≫ Scanmail Version 3.8 Edition microsoft_exchange
Trend Micro ≫ Scanmail Version 3.81 Edition microsoft_exchange
Trend Micro ≫ Scanmail Version 6.1 Edition microsoft_exchange
Trend Micro ≫ Scanmail Version gold Edition lotus_domino_on_aix
Trend Micro ≫ Scanmail Version gold Edition lotus_domino_on_as_400
Trend Micro ≫ Scanmail Version gold Edition lotus_domino_on_s_390
Trend Micro ≫ Scanmail Version gold Edition lotus_domino_on_solaris
Trend Micro ≫ Scanmail Version gold Edition lotus_domino_on_windows
Trend Micro ≫ Serverprotect Version 1.3 Edition linux
Trend Micro ≫ Serverprotect Version 1.25_2007-02-16 Edition linux
Trend Micro ≫ Serverprotect Version 2.5 Edition linux
Trend Micro ≫ Serverprotect Version 5.3.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.41% 0.901
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/14396
Patch
Vendor Advisory
http://securitytracker.com/id?1013289
Patch
Vendor Advisory
http://securitytracker.com/id?1013290
Patch
Vendor Advisory
http://www.securityfocus.com/bid/12643
Patch
http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+VSAPI+ARJ+parsing+could+allow+Remote+Code+execution
Patch
http://xforce.iss.net/xforce/alerts/id/189
Vendor Advisory