A vulnerability has been reported in Trend Micro Control Manager, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an integer overflow error in the "HandleMcpRequest()" function within En_Utility.dll when processing encrypted blob data. This can be exploited to cause a heap-based buffer overflow via specially crafted packets sent to TCP port 20801.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in version 5.0 and 5.5.

Solution
Apply hotfix or Critical Patch. Please contact the vendor for details.

Provided and/or discovered by
Luigi Auriemma via ZDI.

Original Advisory
Trend Micro:
http://esupport.trendmicro.com/solution/en-us/1058292.aspx

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-11-235/

Deep Links
Links available in Customer Area