CVE-2006-6458
High
Description
The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security 2006, Office Scan 7.3, and Server Protect 5.58, allows remote attackers to cause a denial of service (CPU consumption and system hang) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero, which triggers an infinite loop.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Trend Micro Officescan
PublishedDec 11, 2006
First seenDec 11, 2006
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trend_micro officescan | 7.3 | — |
| trend_micro pc_cillin_-_internet_security_2006 | No range specified | — |
| trend_micro serverprotect | 5.58 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.