CVE-2006-6458: High severity trend micro pc cillin - internet security 2006 vulnerability
The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security 2006, Office Scan 7.3, and Server Protect 5.58, allows remote attackers to cause a denial of service (CPU consumption and system hang) via a malformed RAR archive with an Archive Header section with the headsize and packsize fields set to zero, which triggers an infinite loop.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6458?
CVE-2006-6458 is classified as a moderate severity vulnerability due to the potential for denial of service.
How does CVE-2006-6458 exploit the system?
CVE-2006-6458 allows remote attackers to exploit the vulnerability by sending a malformed RAR archive to consume CPU resources and potentially cause a system hang.
What versions of Trend Micro are affected by CVE-2006-6458?
CVE-2006-6458 affects Trend Micro PC Cillin - Internet Security 2006, Office Scan 7.3, and ServerProtect 5.58.
How do I fix CVE-2006-6458?
To fix CVE-2006-6458, update the Trend Micro software to the latest versions that have addressed this vulnerability.
Is my system vulnerable to CVE-2006-6458?
If you are running an affected version of Trend Micro software, your system is vulnerable to CVE-2006-6458.