Title : Trend Micro Antivirus Products UPX File Parsing Kernel Buffer Overflow Vulnerability VUPEN ID : VUPEN/ADV-2007-0522 CVE ID : CVE-2007-0851
Rated as : Critical
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-02-08
Technical Description
A vulnerability has been identified in various Trend Micro products, which could be exploited by attackers or malware to take complete control of an affected system. This issue is due to a buffer overflow error when processing malformed UPX compressed files, which could be exploited by attackers to execute arbitrary commands e.g. by sending an email containing a malicious file to a system being protected by a vulnerable application.