CVE-2021-25227: Trend Micro Antivirus for Mac Memory Exhaustion Denial-Of-Service Vulnerability
First published: Thu Feb 04 2021(Updated: )
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Antivirus for Mac. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the iCoreService executable. The issue results from the lack of proper validation of user-supplied data, which can result in a memory exhaustion condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trendmicro Antivirus | =9.0 | |
| Trendmicro Antivirus | =10.0 | |
| Trendmicro Antivirus | =10.5 | |
| Trendmicro Antivirus | =11.0 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-25227?
CVE-2021-25227 is a vulnerability that allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Antivirus for Mac.
How can this vulnerability be exploited?
To exploit this vulnerability, the target must visit a malicious page or open a malicious file, requiring user interaction.
Which versions of Trend Micro Antivirus for Mac are affected?
Trend Micro Antivirus for Mac versions 9.0, 10.0, 10.5, and 11.0 are affected by this vulnerability.
What is the severity of CVE-2021-25227?
The severity of CVE-2021-25227 is low, with a CVSS severity score of 3.3.
How can I fix CVE-2021-25227?
To fix CVE-2021-25227, it is recommended to update Trend Micro Antivirus for Mac to the latest version provided by the vendor.
- collector/nvd-index
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/title
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-21-102
- alias/ZDI-CAN-11605
- alias/CVE-2021-25227
- agent/software-canonical-lookup
- agent/tags
- agent/event
- agent/trending
- vendor/trendmicro
- canonical/trendmicro antivirus
- version/trendmicro antivirus/9.0
- version/trendmicro antivirus/10.0
- version/trendmicro antivirus/10.5
- version/trendmicro antivirus/11.0
- vendor/trend micro
- canonical/trend micro antivirus for mac