A vulnerability has been reported in various Trend Micro products, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the AntiVirus engine when processing RAR archive with "head_size" and "pack_size" header fields set to 0. This can be exploited to consume almost all CPU resources when scanning a specially crafted RAR archive.

The vulnerability is reported in the following products (other versions may also be affected):
* Trend Micro PC Cillin - Internet Security 2006
* Trend Micro Office Scan 7.3
* Trend Micro Server Protect 5.58

Solution
Update to the latest version of the scan engine.

Provided and/or discovered by
Titon, BastardLabs
Damian Put
An anonymous researcher

Changelog
Further details available in Customer Area

Original Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=439

Deep Links
Links available in Customer Area