Juan Pablo Lopez Yacubian has discovered a security issue in Trend Micro OfficeScan Client, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The security issue is caused due to an error when scanning directories having an overly long pathname. This can be exploited to terminate the NTRtScan.exe process and temporarily disable the real-time scanning protection by scanning a specially crafted directory.

The security issue is confirmed in version 8.0 SP1 Patch 1. Other versions may also be affected.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Juan Pablo Lopez Yacubian

Changelog
Further details available in Customer Area

Original Advisory
Trend Micro:
http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_sp1p3.1_CriticalPatch_B3313_readme.txt
http://www.trendmicro.com/ftp/documentation/readme/OSCE_7.3_CriticalPatch_B1406_readme.txt
http://www.trendmicro.com/ftp/documentation/readme/Readme_OSCE_10.0_Win_EN_CritcialPatch_B1095.txt

Juan Pablo Lopez Yacubian:
http://archives.neohapsis.com/archives/bugtraq/2009-04/0214.html

Deep Links
Links available in Customer Area