CVE-2007-1591: High severity Trend Micro Trend Micro AntiVirus vulnerability

Published Mar 22, 2007

Updated

VsapiNT.sys in the Scan Engine 8.0 for Trend Micro AntiVirus 14.10.1041, and other products, allows remote attackers to cause a denial of service (kernel fault and system crash) via a crafted UPX file with a certain field that triggers a divide-by-zero error.

Affected Software

1 affected component

Trend Micro Trend Micro AntiVirus=14.10.1041

Remediation

Patch Available

http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034587

Event History

Mar 22, 2007

CVE Published

07:19 PM

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1591?

CVE-2007-1591 is rated as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2007-1591?

To mitigate CVE-2007-1591, update your Trend Micro AntiVirus to a version that addresses this vulnerability.

What systems are affected by CVE-2007-1591?

CVE-2007-1591 specifically affects Trend Micro AntiVirus 14.10.1041 and potentially other products using the impacted Scan Engine.

What type of attack does CVE-2007-1591 exploit?

CVE-2007-1591 is exploited through a crafted UPX file that triggers a divide-by-zero error, leading to a kernel fault.

Can CVE-2007-1591 be exploited remotely?

Yes, CVE-2007-1591 can be exploited by remote attackers, making it particularly dangerous.