Trend Micro Scan Engine UPX文件解析远程拒绝服务漏洞

Trend Micro Antivirus是一款流行的反病毒解决方案。 Trend Micro Antivirus处理UPX文件存在除零错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题存在于内核驱动VsapiNT.sys中，驱动负责扫描各种文件格式中的恶意内容，解析UPX文件时获取攻击者提供文件中的整数值，结果恶意的UPX文件可导致内核模式中除零错误导致蓝屏。 Trend Micro Scan Engine 8.3 Trend Micro Scan Engine 8 Trend Micro PC-Cillin Internet Security 2006 14.10 .1023 Trend Micro PC-Cillin Internet Security 2007 Trend Micro Internet Security Suite 2007 0 Trend Micro Antivirus 2007 Trend Micro Antivirus 2007 * Trend Micro OPR 4.335.00 <a href="ftp://download.trendmicro.com/products/pattern/lpt335.zip" target="_blank">ftp://download.trendmicro.com/products/pattern/lpt335.zip</a> Trend Micro Scan Engine 8.3 * Trend Micro OPR 4.335.00 <a href="ftp://download.trendmicro.com/products/pattern/lpt335.zip" target="_blank">ftp://download.trendmicro.com/products/pattern/lpt335.zip</a> Trend Micro PC-Cillin Internet Security 2007 * Trend Micro OPR 4.335.00 <a href="ftp://download.trendmicro.com/products/pattern/lpt335.zip" target="_blank">ftp://download.trendmicro.com/products/pattern/lpt335.zip</a> Trend Micro Scan Engine 8 * Trend Micro OPR 4.335.00 <a href="ftp://download.trendmicro.com/products/pattern/lpt335.zip" target="_blank">ftp://download.trendmicro.com/products/pattern/lpt335.zip</a> Trend Micro PC-Cillin Internet Security 2006 14.10 .1023 * Trend Micro OPR 4.335.00 <a href="ftp://download.trendmicro.com/products/pattern/lpt335.zip" target="_blank">ftp://download.trendmicro.com/products/pattern/lpt335.zip</a>