CVE-2021-25227: Trend Micro Antivirus for Mac Memory Exhaustion Denial-Of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Antivirus for Mac. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the iCoreService executable. The issue results from the lack of proper validation of user-supplied data, which can result in a memory exhaustion condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
Other sources
Trend Micro Antivirus for Mac 2021 (Consumer) is vulnerable to a memory exhaustion vulnerability that could lead to disabling all the scanning functionality within the application. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability - i.e. the attacker must already have access to the target system (either legitimately or via another exploit).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-25227?
CVE-2021-25227 is a vulnerability that allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Antivirus for Mac.
How can this vulnerability be exploited?
To exploit this vulnerability, the target must visit a malicious page or open a malicious file, requiring user interaction.
Which versions of Trend Micro Antivirus for Mac are affected?
Trend Micro Antivirus for Mac versions 9.0, 10.0, 10.5, and 11.0 are affected by this vulnerability.
What is the severity of CVE-2021-25227?
The severity of CVE-2021-25227 is low, with a CVSS severity score of 3.3.
How can I fix CVE-2021-25227?
To fix CVE-2021-25227, it is recommended to update Trend Micro Antivirus for Mac to the latest version provided by the vendor.