PT-2006-7067 · Microsoft+3 · Windows+6

Published 2006-12-11 · Updated 2011-03-08 · CVE-2006-6458

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro scan engine versions prior to 8.320 for Windows Trend Micro scan engine versions prior to 8.150 for HP-UX and AIX Trend Micro PC Cillin - Internet Security 2006 Trend Micro Office Scan 7.3 Trend Micro Server Protect 5.58

Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and system hang, via a malformed RAR archive. This archive has an Archive Header section with the head size and pack size fields set to zero, which triggers an infinite loop.

Recommendations For Trend Micro scan engine versions prior to 8.320 for Windows, update to version 8.320 or later. For Trend Micro scan engine versions prior to 8.150 for HP-UX and AIX, update to version 8.150 or later. For Trend Micro PC Cillin - Internet Security 2006, update to a newer version that includes the fixed scan engine. For Trend Micro Office Scan 7.3, update to a newer version that includes the fixed scan engine. For Trend Micro Server Protect 5.58, update to a newer version that includes the fixed scan engine.

Fix

Related Identifiers

CVE-2006-6458

Affected Products

Aix

Hp-Ux

Trend Micro Officescan

Trend Micro Pc-Cillin Internet Security

Trend Micro Serverprotect

Trend Micro Scan Engine

Windows

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-6458 · Security Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=439 · Note
• http://securityfocus.com/bid/21509 · Note
• http://secunia.com/advisories/23321 · Note
• http://vupen.com/english/advisories/2006/4918 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6458 · Note